customer-research
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as its core purpose is to process and analyze untrusted data from external sources.\n
- Ingestion points: Untrusted data is ingested from digital watering holes (Reddit, G2, Hacker News), external community platforms, and user-provided research assets (transcripts, surveys) as mentioned in
SKILL.mdandreferences/source-guides.md.\n - Boundary markers: The instructions do not define clear delimiters to separate ingested data from the system prompt, nor do they include warnings to ignore instructions within that data.\n
- Capability inventory: The skill primarily performs analytical and synthesis tasks; it does not request or demonstrate use of high-risk capabilities like arbitrary command execution, network exfiltration, or privileged file access.\n
- Sanitization: No sanitization, validation, or filtering processes are specified for the untrusted content being analyzed.
Audit Metadata