founder-competitors
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest data from a variety of external public sources, such as websites, app store listings, and social media platforms. This behavior creates an attack surface for indirect prompt injection, where malicious instructions could be embedded in the external content to influence the agent's behavior.
- Ingestion points: Public websites, price pages, Google Maps, review sites, Reddit, and news articles.
- Boundary markers: The instructions do not include specific delimiters or warnings to ignore embedded instructions within the gathered data.
- Capability inventory: The agent reads existing local files (founder/idea.md), writes new files (founder/competitors.csv, founder/competitors.md), and performs web browsing/searching.
- Sanitization: The skill does not define specific sanitization or validation routines for the information retrieved from external sources.
Audit Metadata