pricing-strategist
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFENO_CODE
Full Analysis
- NO_CODE (SAFE): The skill consists entirely of markdown instructions and execution logic for an AI agent. It does not contain any Python scripts, Node.js code, or shell commands.- DATA_EXPOSURE (SAFE): The skill reads a file named 'FOUNDER_CONTEXT.md'. While this involves file system access, it is a localized project file required for the skill's primary function and does not target sensitive system directories or credentials.- INDIRECT_PROMPT_INJECTION (SAFE): The skill ingests untrusted data from 'FOUNDER_CONTEXT.md'. However, because the skill lacks any dangerous capabilities (such as network requests, shell execution, or file writing), the risk of this ingestion being used for an exploit is negligible.
- Ingestion points: 'FOUNDER_CONTEXT.md'
- Boundary markers: Absent
- Capability inventory: None detected (no subprocess, network, or file-write operations)
- Sanitization: Absent- REMOTE_CODE_EXECUTION (SAFE): No remote code execution patterns or external package dependencies were identified.
Audit Metadata