ai-discoverability-audit
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and reason through untrusted data from external sources, including company websites and prior audit results. There are no explicit instructions or delimiters defined to prevent the agent from being influenced by malicious prompts that might be embedded in the audited brand's online content.
- Ingestion points: Company website URL and user-provided prior audit results (SKILL.md).
- Boundary markers: Absent; no specific instructions are provided to the agent to treat external content as data only.
- Capability inventory: Web searching via platform tools and report generation.
- Sanitization: Absent; the skill does not specify any filtering or validation for the content retrieved from the web.
- [NO_CODE]: The skill is purely instructional and documentation-based. It does not contain any Python, Node.js, or shell scripts, nor does it attempt to install third-party dependencies.
Audit Metadata