companies-like-x
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection by ingesting and processing untrusted data from the internet.
- Ingestion points: Untrusted data enters the agent context through the
WebSearchandWebFetchtools used during the seed profiling and peer enumeration phases in SKILL.md. - Boundary markers: The skill instructions do not specify the use of delimiters or 'ignore' instructions to separate external web content from the agent's internal logic.
- Capability inventory: The skill is authorized to use
Writeand limitedBashcommands (mkdir,test), which could be targeted by an injection attack. - Sanitization: There are no instructions provided to sanitize, validate, or filter content retrieved from the web before it is written to the output file.
Audit Metadata