customer-research
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill package contains only markdown instructions and evaluation data, with no executable code, scripts, or binaries included.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data, which is a known attack surface for indirect prompt injection.
- Ingestion points: The skill reads raw customer interview transcripts, sales call notes, survey responses, support tickets, and community content from platforms such as Reddit, G2, Hacker News, and LinkedIn.
- Boundary markers: No explicit instructions or delimiters are provided to the agent to isolate external research data or to treat it as untrusted content that might contain embedded instructions.
- Capability inventory: The skill itself does not define direct code execution or network exfiltration capabilities; its primary function is text synthesis and reporting.
- Sanitization: The skill lacks explicit sanitization or filtering steps for the ingested research materials, relying on the model's inherent guardrails.
Audit Metadata