competitor-monitor
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes an external script
competitor-tracker.pywith thesave-baselineargument to persist collected data to the local filesystem. - [PROMPT_INJECTION]: The skill processes untrusted data from external sources (competitor websites, Google Ads Transparency Center, Meta Ad Library) which could contain hidden instructions targeting the agent.
- Ingestion points: Competitor URLs provided by users and subsequent automated crawling of pricing, product, and ad library pages.
- Boundary markers: None identified; external content is processed and synthesized directly into intelligence briefs.
- Capability inventory: File system writes via
competitor-tracker.pyand external notifications viasend-notificationor email. - Sanitization: No explicit sanitization or validation of the ingested HTML/text content is described.
Audit Metadata