market-research-digest
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple sources, creating a potential vector for indirect prompt injection.
- Ingestion points: Ingests content from Google Drive files, links found within those files, Granola meeting notes, and web search results via the Browser MCP.
- Boundary markers: The instructions do not use delimiters or specific guidance to ignore embedded commands within the retrieved research data.
- Capability inventory: The agent can write new files to Google Drive and perform web searches.
- Sanitization: There is no evidence of filtering or sanitizing the input data before it is processed by the LLM for synthesis.
Audit Metadata