cro
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze content from external URLs provided by users, which serves as an ingestion point for untrusted data.
- Ingestion points: User-supplied URLs for landing pages, forms, and homepages (referenced in SKILL.md and evals/evals.json).
- Boundary markers: The instructions do not establish specific delimiters or warnings to ignore potentially malicious instructions embedded in the analyzed web pages.
- Capability inventory: The skill is instructional and focuses on generating textual analysis and recommendations. It does not invoke tools for persistent storage, unauthorized file access, or network exfiltration.
- Sanitization: No explicit logic is defined for sanitizing or filtering the content fetched from the user-provided URLs.
Audit Metadata