Trend Researcher
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves ingesting untrusted data from the internet, creating a vulnerability to indirect prompt injection.
- Ingestion points: Untrusted data enters the agent context through the use of
WebSearchandWebFetchtools as described in the 'Research Methodologies' and 'Trend Identification Process' sections. - Boundary markers: The instructions lack explicit boundary markers or directives for the agent to ignore or isolate instructions that might be embedded in the fetched external content.
- Capability inventory: Across its core capabilities, the skill has access to the
WriteandEdittools, which could be abused if the agent inadvertently follows instructions contained within a malicious webpage. - Sanitization: The skill does not define any processes for sanitizing, validating, or escaping data retrieved from external URLs before it is processed or written to disk.
Audit Metadata