product-research
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites which could contain malicious instructions designed to influence the agent's research output.
- Ingestion points: Reddit post titles and comments are extracted in Phase 2 and Phase 3 of the SKILL.md file, and competitor reviews are extracted in Pass 2C.
- Boundary markers: There are no instructions to the agent to treat the extracted content as untrusted data or to use delimiters to prevent the agent from following instructions embedded in the scraped text.
- Capability inventory: The skill utilizes playwright-cli to perform browser automation, including navigating to URLs and executing arbitrary JavaScript within the browser context.
- Sanitization: The skill does not implement any sanitization, filtering, or escaping of the content retrieved from the web before presenting it to the agent for analysis and scoring.
Audit Metadata