competitor-teardown
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references an external installation guide for the CLI hosted on the vendor's official GitHub repository (
inference-sh/skills). This is a trusted source used for legitimate setup instructions. - [COMMAND_EXECUTION]: The skill includes an example for generating a competitive positioning map using a Python script executed through the
infsh/python-executortool. The code uses the standardmatplotliblibrary and does not incorporate unsanitized external inputs into the execution string. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npx skills addto manage dependencies (CLI and web-search skills). These packages originate from the vendor's own namespace and represent standard functionality for the platform. - [COMMAND_EXECUTION]: The skill makes extensive use of the
beltCLI to interact with various search and browser agents (tavily/search-assistant,infsh/agent-browser, etc.). These operations are consistent with the skill's stated purpose of gathering market intelligence.
Audit Metadata