geo-audit
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill performs audits by ingesting and analyzing data from external, untrusted URLs. It identifies this attack surface and mitigates it by instructing the agent to wrap all external content in delimiters and treat it strictly as data for analysis.
- Ingestion Points: Phase 1.2 (homepage HTML) and Phase 1.5 (robots.txt, sitemaps) in SKILL.md, as well as various platform-specific fetches in subagent files (e.g., references/agents/geo-brand.md).
- Boundary Markers: The skill explicitly mandates the use of tags in SKILL.md and all subagent instruction files.
- Capability Inventory: The agent uses tools to fetch URLs and writes Markdown, PDF, and Word reports to the local file system (Phase 5.1, Phase 6).
- Sanitization: The skill includes defensive instructions to detect and log prompt injection attempts found in external data as 'Prompt Injection Attempt Detected' rather than obeying them.
- [PROMPT_INJECTION]: Static detectors flagged instructions related to ignoring instructions. Analysis confirms these are defensive security constraints directing the agent to ignore malicious commands found within untrusted external content (Indirect Prompt Injection), rather than attempts to bypass the agent's own safety filters.
Audit Metadata