geo-domination
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is primarily instructional text guiding the agent through company analysis, prompt generation, and competitive benchmarking. It contains no executable scripts, hardcoded credentials, or suspicious network operations.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve gathering data from untrusted external platforms and user-supplied logs, which could theoretically contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Web search results from Reddit, Quora, and niche forums; third-party review sites like G2 and Trustpilot; and user-provided 'sales call notes, support tickets, onboarding survey answers' (SKILL.md, Step 1 and Step 2).
- Boundary markers: Absent. The instructions do not mandate the use of XML tags, delimiters, or specific system instructions to ignore embedded commands within the ingested external data.
- Capability inventory: The skill assumes the agent has access to web search tools and the ability to process user-provided text files.
- Sanitization: Absent. Content is analyzed directly for 'customer language' and 'problems people hire this product to solve' without an explicit filtering or escaping step.
Audit Metadata