research-audience-people-and-contacts
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze data from untrusted external sources, including company websites, social media profiles, and search engine results, creating an attack surface for indirect prompt injection.
- Ingestion points: Web search results, company 'About' and 'Leadership' pages, LinkedIn profiles, and press releases.
- Boundary markers: The instructions do not specify any delimiters or safety markers to differentiate between the agent's instructions and the content retrieved from the web.
- Capability inventory: The skill is instructed to read local reference files and write researched contact data (people rows, emails, status) to a ledger or vendor portal.
- Sanitization: There are no specific instructions for sanitizing or escaping the content retrieved from external sources before it is processed or stored.
Audit Metadata