customer-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted content from external websites and search results.
- Ingestion points: Data is retrieved from logo alt-text, headings, and technology directories using the
scrape_website_logos.py,scrape_wayback_logos.py, andsearch_builtwith.pyscripts. - Boundary markers: There are no explicit delimiters or instructions to the agent to ignore embedded commands within the scraped strings.
- Capability inventory: The skill creates directories, writes files, and executes local scripts.
- Sanitization: A
clean_namefunction filters for length and noise but does not perform comprehensive sanitization for injection patterns. - [COMMAND_EXECUTION]: The skill instructs the agent to execute local Python scripts and shell commands (
mkdir) as part of its standard research and reporting workflow. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
requestslibrary from the official Python package index, which is standard for network operations.
Audit Metadata