competitive-research
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides a research methodology for an AI agent without implementing any dangerous technical capabilities. It functions as a set of logical prompts and templates.
- [NO_CODE]: No scripts, external dependencies, or executable command patterns were found in the skill definitions.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external information such as competitor URLs and analyst reports, creating an attack surface.
- Ingestion points: Competitor URLs, product documentation, analyst reports, customer notes, and press clippings.
- Boundary markers: No specific delimiters or warnings to ignore embedded instructions are present in the prompt templates.
- Capability inventory: None. The skill does not request or use any tools (e.g., shell access, file writes, or network requests).
- Sanitization: No sanitization of ingested content is performed.
- Conclusion: Although untrusted data is ingested, the absence of any exploitable capabilities makes the risk negligible.
Audit Metadata