competitive-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to gather data from external, untrusted sources such as user forums and product reviews (Step 5). This creates a surface for indirect prompt injection if those sources contain malicious instructions.
- Ingestion points: External competitor reviews and forum posts analyzed in Step 5.
- Boundary markers: None specified in the instructions.
- Capability inventory: None. The skill itself does not define any tool use or shell execution.
- Sanitization: The skill notes that inputs are treated as read-only analysis targets and are not used in command generation.
- [NO_CODE]: The skill is entirely composed of natural language instructions and contains no executable code, scripts, or external package dependencies.
- [SAFE]: All procedures describe standard business analysis workflows. There are no patterns suggesting credential theft, data exfiltration, or persistence.
Audit Metadata