competitor-intel
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from untrusted external sources, such as competitor websites, social media (Reddit, Twitter/X, LinkedIn), and third-party review platforms.
- Ingestion points: Phase 1 (Competitor Profile Research) uses web search and fetch tools to gather data.
- Boundary markers: The skill does not implement delimiters or specific instructions to ignore malicious prompts that might be hidden within the fetched web content.
- Capability inventory: The skill performs web research and text analysis; it does not include scripts for file system modification, command execution, or other high-privilege operations.
- Sanitization: No content filtering or sanitization of the ingested web data is defined.
- [NO_CODE]: This skill consists entirely of markdown instructions and metadata. It contains no executable scripts, binaries, or configuration files that would trigger local code execution.
Audit Metadata