competitor-profiling
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to create a local directory structure (
competitor-profiles/) and save research findings as markdown and JSON files. - [EXTERNAL_DOWNLOADS]: The skill uses established external services (Firecrawl and DataForSEO) to retrieve website content and SEO metrics from competitor URLs.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface because it processes untrusted data from external websites. Ingestion points: Content retrieved from competitor URLs via
firecrawl_scrape(SKILL.md). Boundary markers: Absent; the instructions do not specify using delimiters to isolate scraped content. Capability inventory: File system write access for saving research data. Sanitization: Absent; the skill saves raw markdown from external sources for subsequent synthesis.
Audit Metadata