pricing
Fail
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The 'references/full-reference.md' file includes 16 citations and hyperlinks to 'www.getmonetizely.com'. Automated security scanners have identified this domain as a phishing threat. While the agent is not explicitly directed to execute code from these links, their inclusion as trusted references in the knowledge base presents a risk to the integrity of the agent's advice and to any user following the citations.
- [INDIRECT_PROMPT_INJECTION]: The 'Audit' mode in 'SKILL.md' allows the agent to ingest and analyze external URLs provided by users. This functional surface is vulnerable to indirect prompt injection because the skill does not implement safety boundaries or sanitization for external content.
- Ingestion points: User-provided pricing page URLs in the Audit mode.
- Boundary markers: No delimiters or 'ignore' instructions are provided to help the agent distinguish between data and potentially malicious instructions within the audited page.
- Capability inventory: The agent provides strategic advisory and audit outputs based on external data.
- Sanitization: There are no defined routines for validating, filtering, or escaping the content retrieved from processed URLs.
Recommendations
- AI detected serious security threats
- Contains 16 malicious URL(s) - DO NOT USE
Audit Metadata