market-research
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process significant amounts of untrusted data from external sources, which constitutes an indirect prompt injection surface.
- Ingestion points: The workflow incorporates data from web research deep dives, NewsAPI articles, G2 reviews, and job postings from Adzuna into the final research synthesis.
- Boundary markers: The skill instructions do not define explicit boundary markers or delimiters (e.g., XML tags or specific markdown blocks) to isolate untrusted external content from the agent's core instructions.
- Capability inventory: The skill possesses the capability to execute Python scripts (via the
SignalEnginemodule) and write files to thecampaigns/directory. - Sanitization: There are no specific instructions for the agent to sanitize, filter, or escape instructions that might be embedded within the external industry reports or news data it retrieves.
Audit Metadata