product-pair
Pass
Audited by Gen Agent Trust Hub on May 11, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: Indirect prompt injection vulnerability surface. The skill is designed to ingest and process data from external websites to research product pairings. This untrusted content is then incorporated into the agent's logic to generate design recommendations and can be stored in Google Sheets.\n
- Ingestion points: Data retrieved from external URLs via search and fetching tools (SKILL.md).\n
- Boundary markers: The instructions do not define delimiters (like XML tags) to separate untrusted web data from the agent's instructions.\n
- Capability inventory: Includes file writing, editing, and updating Google Sheets values (SKILL.md).\n
- Sanitization: There is no explicit requirement for the agent to sanitize or validate the fetched web content before processing.\n- [EXTERNAL_DOWNLOADS]: Installation instructions in README.md point to cloning the source code from the author's official GitHub repository (AlpacaLabsLLC/skills-for-architects). This represents expected functionality for installing a vendor's toolset.
Audit Metadata