use-discovery
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEPERSISTENCEINDIRECT_PROMPT_INJECTION
Full Analysis
- [PERSISTENCE]: The skill implements a persistent data store located at
~/.alexandre-trotel-skills/to cache founder profiles, problem signals, and opportunity reports. While intended for maintaining state between sessions, this represents a mechanism for the agent to write to and read from the local file system in a hidden directory. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze content from external, untrusted sources to identify market problems and competitors.
- Ingestion points: The skill explicitly gathers data from Reddit, Hacker News, public forums, and user-provided links (Personal websites, GitHub, X/Twitter, LinkedIn) as described in Phase 3 and Phase 1.L.
- Boundary markers: The instructions do not specify any boundary markers or delimiters to separate the retrieved external data from the agent's internal instruction set.
- Capability inventory: The skill possesses the capability to perform web research and write the results to a persistent local storage directory.
- Sanitization: There is no evidence of sanitization, filtering, or validation of the content retrieved from external URLs before it is processed by the agent.
Audit Metadata