market-researcher
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides functionality to generate personas and Jobs-to-be-Done (JTBD) frameworks based on user-supplied research data, such as survey results and interview transcripts. This processing of untrusted external data represents an indirect prompt injection attack surface.
- Ingestion points: Research data ingested during Step 7 (Persona Output) and Step 8 (JTBD Framework) as described in SKILL.md.
- Boundary markers: The skill instructions lack explicit delimiters or specific 'ignore embedded instructions' warnings for the data it processes.
- Capability inventory: The skill's logic is focused on generating markdown reports and does not request or use capabilities such as network access, arbitrary shell command execution, or sensitive file system writes.
- Sanitization: There are no documented procedures for validating or filtering the content of the external research data before it is analyzed by the agent.
Audit Metadata