bootstrap-oracle

Pass

Audited by Gen Agent Trust Hub on Jul 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill provides a set of instructions and templates for business analysis and does not contain any malicious code, obfuscation, or unauthorized access patterns.
  • [EXTERNAL_DOWNLOADS]: The skill utilizes the WebSearch and WebFetch tools to retrieve market size, competitor data, and industry trends from the internet as part of its legitimate research process.
  • [INDIRECT_PROMPT_INJECTION]: The skill identifies a potential attack surface through the ingestion of external web content. Ingestion points: Market and competitor data are fetched from the web using WebSearch and WebFetch as specified in SKILL.md. Boundary markers: No specific delimiters are present to separate external content from instructions. Capability inventory: The skill's actions are limited to text-based analysis; no capabilities for code execution, file system modification, or data exfiltration are present. Sanitization: No explicit validation or sanitization of the fetched content is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 12, 2026, 12:36 AM
Security Audit — agent-trust-hub — bootstrap-oracle