analyze-competition
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple external sources, creating a potential vector for indirect prompt injection.
- Ingestion points:
SKILL.mdspecifies reading "market notes", "pasted Perplexity output", and "competitor URLs" to build the analysis. - Boundary markers: There are no instructions to use delimiters or to treat ingested external content as untrusted data.
- Capability inventory: The skill utilizes
ReadandWritetools to analyze workspace files and generate a competitive analysis report. - Sanitization: The methodology does not include steps to sanitize or filter the content of external reports or URLs before they are processed by the agent.
Audit Metadata