pricing-model
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to instructions embedded in existing pricing documents during its 'UPDATE' and 'FIND' modes.
- Ingestion points: The skill reads markdown files from workspace directories including pricing/, strategy/pricing/, gtm/, and business/ as defined in SKILL.md.
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard or sanitize potential commands found within the referenced files.
- Capability inventory: The skill can search for files, read file contents, and write files to the pricing/ directory. It does not have network access, subprocess execution, or privilege escalation capabilities.
- Sanitization: The skill does not perform validation or escaping of the ingested file content before it is incorporated into the agent context or rewritten to the file system.
Audit Metadata