research-competitors-edge-cases
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external research data and previous reports which could serve as a vector for indirect prompt injection.
- Ingestion points: Fetches data from external websites, re-checks facts from earlier saved research, and reuses content from previous brand reports (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or warnings to ignore instructions embedded within the fetched external data.
- Capability inventory: Utilizes the
gooseworks:ads_template_readtool and general web fetching capabilities (SKILL.md). - Sanitization: No specific sanitization, validation, or escaping of the retrieved external content is defined in these instructions.
Audit Metadata