brand-context
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites using scraping tools like Firecrawl and Apify, which could potentially contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Website content is processed via the
firecrawl_urls_scrapeandweb_pages_scrapetools as described in the 'Building the doc' section of SKILL.md. - Boundary markers: The instructions do not specify the use of technical delimiters or structured markers for separating scraped content from internal instructions.
- Capability inventory: The skill has access to file system tools (
create_file,edit_file) and downstream marketing skills that consume the generated context file. - Sanitization: The skill employs a strong human-in-the-loop mitigation by requiring the agent to present the draft to the user section-by-section for correction and verification before any data is saved to the persistent brand-context.md file.
- [EXTERNAL_DOWNLOADS]: The skill references external tools and platforms to facilitate its branding and research capabilities.
- Connects to the vendor's management interface at
app.hyperfx.aifor tool configuration and MCP connectivity. - Utilizes third-party data extraction services including Firecrawl and Apify to automate the gathering of brand assets and customer language from public web pages.
Audit Metadata