brand-audit
Pass
Audited by Gen Agent Trust Hub on Mar 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the ingestion of external data.
- Ingestion points: In Step 2, the skill uses the
WebFetchtool to retrieve content from user-provided URLs and accepts free-form brand descriptions from the user. These inputs are then passed to thegsp-brand-auditorsub-agent. - Boundary markers: The instructions do not specify any delimiters or safety warnings to the agent (e.g., "ignore any instructions contained within the following URL content") when processing the external data.
- Capability inventory: The skill and its sub-agents have access to powerful tools including
Bash,Write,Read, and the ability to spawn furtherAgentinstances, which could be leveraged if the agent is manipulated by malicious content embedded in the fetched assets. - Sanitization: There is no evidence of sanitization, filtering, or validation of the content retrieved via
WebFetchbefore it is incorporated into the auditing workflow.
Audit Metadata