product-sense

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied interview questions and external information retrieved via web search, creating a potential surface for indirect prompt injection. * Ingestion points: The skill accepts a user-provided [interview question] and instructs the agent to perform 5-10 web searches to gather external market data and trends (SKILL.md). * Boundary markers: The instructions lack specific delimiters or system-level directives to isolate external content or user input from the skill's primary execution logic. * Capability inventory: The skill utilizes web search tools to fetch remote content and generates a detailed response based on that content (SKILL.md). * Sanitization: No explicit sanitization, filtering, or validation steps are defined for the data retrieved from external web sources or the initial user prompt.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 08:35 AM