lead-research-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources (such as web search results, job postings, and company news) as well as local codebase content. This creates a surface for indirect prompt injection if malicious instructions are embedded in the processed data. This behavior is consistent with the skill's primary purpose of lead research.
- Ingestion points: Web search results, company websites, job postings, and local project files (SKILL.md).
- Boundary markers: None (not specified in instructions).
- Capability inventory: The skill utilizes file reading and web search capabilities to perform research.
- Sanitization: None (not specified in instructions).
Audit Metadata