copycat-blue-team
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as user reviews and market artifacts, which represents a potential attack surface for indirect prompt injection. * Ingestion points: Review-analysis evidence and product profiles provided by the caller as described in the Inputs section of SKILL.md. * Boundary markers: The skill does not explicitly define delimiters or instructions to ignore embedded commands within the ingested text. * Capability inventory: The skill can write files to a user-specified output_path or run_dir. * Sanitization: No explicit input sanitization or validation logic is specified for the provided artifacts.
- [SAFE]: The core functionality of the skill is focused on structured reporting and analysis. It follows standard practices for generating artifacts based on provided market evidence and uses agent-provided file paths for output, demonstrating no signs of malicious behavior, data exfiltration, or unauthorized command execution.
Audit Metadata