competitor-research
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, such as hardcoded credentials, remote code execution, or privilege escalation, were detected in the skill instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data retrieved from the web (competitor reviews, forums, and websites), which constitutes an indirect prompt injection surface.
- Ingestion points: Web search results are processed to extract positioning, pricing, and weaknesses (SKILL.md).
- Boundary markers: There are no explicit delimiters or instructions provided to the agent to disregard instructions embedded within the retrieved web content.
- Capability inventory: The skill contains no scripts, shell commands, file writing operations, or network exfiltration capabilities, limiting the potential impact of an injection.
- Sanitization: No content filtering or validation is specified for the data ingested from external sources.
Audit Metadata