competitor-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from third-party search engine results and competitor content.
- Ingestion points: The skill ingests external data through tools like
get_ranked_keywords,get_serp_results, andget_google_business_questionswhich fetch content from the public web. - Boundary markers: The instructions do not define specific delimiters for separating external content from the agent's internal reasoning.
- Capability inventory: The skill has the ability to write to the project's internal state via
update_project_contextand generate HTML-based reports via theseo-reportskill. - Sanitization: No explicit content sanitization or validation logic is specified for the data retrieved from external tools.
Audit Metadata