tam-sam-som-calculator

Pass

Audited by Gen Agent Trust Hub on Mar 3, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it encourages users to provide external materials such as website copy and marketing emails to build context. * Ingestion points: Step 0 in SKILL.md identifies marketing materials and website content as inputs. * Boundary markers: There are no explicit instructions or delimiters to isolate user-provided content from the agent's internal logic. * Capability inventory: The agent performs text analysis and can execute the provided market-sizing.py script. * Sanitization: No sanitization or filtering of the user-provided context is specified.
  • [COMMAND_EXECUTION]: The skill includes a Python script scripts/market-sizing.py and instructs the user or agent to execute it for deterministic math. The script uses standard libraries and does not have network access.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 3, 2026, 06:33 AM