product-appeal-analyzer

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: No malicious behavior, hardcoded credentials, or unauthorized network operations were detected in the skill instructions or associated scripts.\n- [PROMPT_INJECTION]: The skill architecture is susceptible to indirect prompt injection due to its core function of ingesting and analyzing untrusted data from external URLs.\n
  • Ingestion points: The skill utilizes the WebFetch tool to retrieve content from landing pages and product sites for evaluation.\n
  • Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat the fetched content as untrusted data or to ignore instructions embedded within the processed text.\n
  • Capability inventory: The skill is configured with access to Read, Write, Edit, and WebFetch tools as specified in the SKILL.md frontmatter.\n
  • Sanitization: The skill does not implement automated sanitization or filtering of the content retrieved via WebFetch before it is analyzed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 07:20 PM
Security Audit — agent-trust-hub — product-appeal-analyzer