niche-opportunity-finder
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources and incorporates it into the agent's analysis and final report, creating a potential vector for malicious instructions to influence the agent.
- Ingestion points: The skill performs
web_searchqueries in Steps 2, 3, and 4, and fetches data from theopenaffiliate.devAPI in Step 4. - Boundary markers: The instructions do not define boundary markers or delimiters to isolate untrusted external content, nor do they instruct the agent to ignore embedded commands within the fetched data.
- Capability inventory: The skill utilizes
web_searchand network GET requests to process research and discover affiliate programs. - Sanitization: There is no evidence of sanitization, validation, or filtering of the content retrieved from search results or the external API before it is presented to the user or used for scoring.
Audit Metadata