seven-powers
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and update existing strategy documents located in various directories, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: The skill reads existing 7 Powers analysis files from paths such as
strategy/,competitive/,product/, andanalysis/when in 'Update' mode. - Boundary markers: Absent; there are no specific instructions or delimiters provided to the agent to distinguish between the framework's instructions and potentially malicious content within the files being analyzed.
- Capability inventory: The skill primarily instructs the agent to perform textual analysis and generate markdown reports. It does not explicitly call for the use of sensitive tools like network requests or shell execution.
- Sanitization: Absent; the skill does not specify any validation or sanitization of the content read from the file system before it is incorporated into the agent's context.
Audit Metadata