alterlab-pra-market-research
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it ingests untrusted data from the web and local project files to generate market reports. This data could contain hidden instructions aimed at manipulating the agent's output or behavior.
- Ingestion points: According to
SKILL.md, the agent is instructed to "search the web for current industry reports" and "read existing project files for context." - Boundary markers: The instructions lack any requirement for the agent to use delimiters or specific ignore-tags when processing external or project-based content.
- Capability inventory: The agent is authorized to write markdown deliverables (e.g.,
{project}-market-analysis.md) directly to the project directory. - Sanitization: There are no documented procedures for sanitizing, validating, or filtering content retrieved from the web or internal files before it is processed or written to new files.
Audit Metadata