tam-sam-som-calculator
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it encourages users to provide external materials such as website copy and marketing emails to build context. * Ingestion points: Step 0 in
SKILL.mdidentifies marketing materials and website content as inputs. * Boundary markers: There are no explicit instructions or delimiters to isolate user-provided content from the agent's internal logic. * Capability inventory: The agent performs text analysis and can execute the providedmarket-sizing.pyscript. * Sanitization: No sanitization or filtering of the user-provided context is specified. - [COMMAND_EXECUTION]: The skill includes a Python script
scripts/market-sizing.pyand instructs the user or agent to execute it for deterministic math. The script uses standard libraries and does not have network access.
Audit Metadata