competitor-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill tracks competitor sentiment and feedback from external sources, introducing a surface for indirect prompt injection.\n
- Ingestion points: Social media mentions, community forum posts, and GitHub issue comments (SKILL.md).\n
- Boundary markers: Absent; the skill does not define specific boundaries or ignore-instructions for the external data.\n
- Capability inventory: Shell command execution via the GitHub CLI (
gh) (SKILL.md).\n - Sanitization: Absent; no validation or escaping of external content is described.\n- [COMMAND_EXECUTION]: The skill utilizes shell commands to interact with the GitHub API and search for competitor activity.\n
- Evidence: Execution of
gh apiandgh search issuesin SKILL.md.
Audit Metadata