competitor-teardown
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the internet through search tools and browser agents, which could be manipulated by external parties to influence the agent's logic.
- Ingestion points: Uses
tavily/search-assistant,exa/search, andinfsh/agent-browserin SKILL.md to fetch web content and search results. - Boundary markers: Absent. The skill does not implement delimiters or safety instructions to separate external data from system prompts.
- Capability inventory: The skill has the ability to execute Python code via
infsh/python-executor, write files (PNG maps), and perform browser operations. - Sanitization: No sanitization, escaping, or validation of the retrieved web content is performed.
- [EXTERNAL_DOWNLOADS]: The skill references and downloads components from the developer's infrastructure and well-known services.
- Fetches installation guidelines from the
inference-shGitHub repository. - References the official
inference.shCLI and vendor-specific NPM packages. - [DYNAMIC_EXECUTION]: The skill includes a static Python template that is executed at runtime to generate data visualizations.
- Uses
matplotlibto generate and save a positioning map aspositioning-map.png. - [COMMAND_EXECUTION]: The skill uses the
beltCLI tool to orchestrate research tasks, application runs, and image processing.
Audit Metadata