discover-remote-friendly
Pass
Audited by Gen Agent Trust Hub on Apr 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to the processing of untrusted data from external job boards and company websites.
- Ingestion points: Data is fetched from external sources using WebFetch and WebSearch tools in Step 3 of the procedure.
- Boundary markers: There are no defined delimiters or instructions provided to the agent to treat external content as untrusted or to ignore instructions within it.
- Capability inventory: The skill allows filesystem write operations and limited Bash execution (mkdir and test), which could be targets for an injection attack.
- Sanitization: The skill does not implement any sanitization or validation of the retrieved content before it is processed by the model or written to the output file.
Audit Metadata