bcg-matrix
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from product portfolios and external markdown files which could potentially contain malicious instructions.
- Ingestion points: Ingests data from user inputs describing product portfolios and existing files located in project directories such as
strategy/,product/,portfolio/, andplanning/. - Boundary markers: The instructions lack explicit boundary markers (e.g., XML tags or delimiters) to separate instructions from processed data.
- Capability inventory: The skill has the ability to search the filesystem, read files, perform web searches via the
WebSearchtool, and write output to markdown files. - Sanitization: There is no evidence of input validation or sanitization of the content retrieved from external files or user input before it is used to generate the analysis.
Audit Metadata