competitor-profiling
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves data from user-supplied competitor URLs and third-party platforms including G2, Capterra, Product Hunt, and DataForSEO using scraping and SEO tools.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it processes data from untrusted external sources.
- Ingestion points: Data retrieved from
firecrawl_scrape,firecrawl_search, andfirecrawl_crawl(SKILL.md, Phase 1). - Boundary markers: No explicit delimiters or 'ignore' instructions are used to separate scraped content from the agent's core logic during the synthesis phase.
- Capability inventory: The skill includes instructions to write data and synthesized profiles to the local
competitor-profiles/directory (SKILL.md, Saving Raw Data). - Sanitization: There is no mention of filtering, escaping, or validating the content scraped from the web before the agent processes it.
Audit Metadata