account-research-sales-card
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from multiple external sources, which could potentially contain malicious instructions intended to influence the agent's behavior.
- Ingestion points: Fields defined in
references/form-schema.jsonincludetargetAccountInfo(pasted text),accountSourceUrl(external URL), andaccountResearchFile(uploaded documents like PDF/Docx). - Boundary markers: No explicit delimiters or instructions are provided to the model to ignore potential prompt injection attempts within the analyzed content.
- Capability inventory: The skill's primary function is text analysis and generation of summaries and action plans. The associated runner script (
scripts/run.py) performs network operations to the vendor's API but does not provide the agent with local execution capabilities. - Sanitization: There is no evidence of sanitization or filtering of the external input before it is processed by the AI.
- [EXTERNAL_DOWNLOADS]: The skill involves network interactions with external services.
- Vendor API: The runner script
scripts/run.pycommunicates withhttps://ai-skills.aito process the skill's logic. This is the official infrastructure for the skill author. - User-Provided URLs: The skill can fetch and analyze content from URLs provided in the
accountSourceUrlparameter, which is part of its core research functionality.
Audit Metadata