monopoly-niche-finder
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to ingest and analyze external data from the web, which is an untrusted source.
- Ingestion points: The workflow in
SKILL.md(Step 3) directs the agent to performweb_searchoperations on Reddit and various blogs to validate niche ideas. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to distinguish between its internal logic and potentially malicious instructions embedded in the search results.
- Capability inventory: The skill focuses on analytical tasks, scoring, and roadmap generation. It does not exhibit dangerous capabilities such as file system modifications, arbitrary shell command execution, or network exfiltration of sensitive data.
- Sanitization: No specific sanitization or filtering mechanisms are defined for the data retrieved from external searches.
Audit Metadata