ad-angle-miner
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches data from Apify's API (api.apify.com) and uses web searches to collect information from platforms like Amazon, G2, Reddit, and Twitter. These are well-known services used as intended for data mining.
- [PROMPT_INJECTION]: The skill ingests untrusted user-generated content into the agent context, creating a surface for indirect prompt injection. Ingestion points: Data enters the context via API results from api.apify.com and various platforms through web search results. Boundary markers: No specific delimiters or instructions to ignore embedded commands are included in the prompt. Capability inventory: The skill utilizes network requests, web searching, and local file writing to generate reports. Sanitization: The instructions do not define methods for sanitizing or escaping external text before analysis.
Audit Metadata