shopping-assistant
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from external sources, which is a standard surface for indirect prompt injection. \n
- Ingestion points: The agent fetches and reads content from external review articles, comparison websites, and shopping site search results (Phases 3, 4, and 8). \n
- Boundary markers: The instructions do not define boundary markers or explicit delimiters to isolate external content or instruct the agent to ignore instructions embedded within the data. \n
- Capability inventory: The skill has capabilities for web search and data analysis but does not demonstrate access to sensitive local files, shell execution, or arbitrary network writes. \n
- Sanitization: There is no requirement in the instructions to sanitize, filter, or validate the content retrieved from external websites before processing.
Audit Metadata