suede-competitor-profiling
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from untrusted external sources, including competitor websites, pricing pages, and third-party review platforms.
- Ingestion points: Phase 1 and Phase 3 of the Research Process (SKILL.md) ingest content from competitor URLs and review sites like G2, Capterra, and Product Hunt.
- Boundary markers: The skill mandates the use of evidence markers (
[fact: url, date],[inference]) defined in references/templates.md and includes a "Boundaries" section that restricts the agent from bypassing site controls or contacting competitors. - Capability inventory: The skill uses web-fetching tools (e.g., Firecrawl), directory listing (
ls -R), and filesystem write access to the localcompetitor-profiles/directory. - Sanitization: The instructions require saving all raw browser or tool captures as markdown files for auditing and verification against the final synthesized profile.
- [COMMAND_EXECUTION]: The skill uses a standard directory listing command to verify the presence of evidence before finalizing its output.
- Evidence: Phase 4 of the research process (SKILL.md) executes
ls -Ragainst the localcompetitor-profiles/raw/directory to ensure all required data points were successfully captured.
Audit Metadata