pricing
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill includes functionality to audit external pricing pages provided via URL, which introduces an indirect prompt injection surface. This is a functional requirement for the auditing task and is mitigated by explicit safety instructions.
- Ingestion points: External pricing page content fetched from user-provided URLs as described in SKILL.md and references/pricing-page-teardown.md.
- Boundary markers: Explicitly present in references/pricing-page-teardown.md, which warns the agent to treat fetched content as untrusted and to never follow instructions embedded in it.
- Capability inventory: The skill provides instructions but no custom executable scripts; it relies on the agent's native browsing and analysis capabilities.
- Sanitization: Relies on the explicit instructional boundary provided to the agent to ignore embedded commands.
Audit Metadata