landing-page-review
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or behaviors were detected in the skill's logic.- [PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection because it fetches and processes content from external, untrusted URLs.
- Ingestion points: Website content is retrieved via the
WebFetchtool as described in SKILL.md. - Boundary markers: No explicit delimiters or instructions are used to separate external content from the agent's core instructions.
- Capability inventory: The skill configuration allows access to
Bash,Write, andReadtools, which could potentially be targeted by malicious instructions embedded in fetched webpages. - Sanitization: No sanitization or validation of the fetched content is performed before analysis.
Audit Metadata