customer-research
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions are focused entirely on the legitimate task of customer research. No malicious code, command execution, or persistence mechanisms are present.
- [INDIRECT_PROMPT_INJECTION]: As a research tool, this skill is designed to ingest and analyze untrusted data from external sources (e.g., Reddit, G2, customer transcripts). This is the intended primary use case and constitutes a known attack surface for this type of agent skill. The instructions mitigate this by providing a strict extraction framework (Jobs to be Done, Pains, etc.) to keep the agent focused on data extraction rather than instruction obedience.
- Ingestion points: External content from social media, forums, and review sites, as well as uploaded files like interview transcripts (SKILL.md, references/source-guides.md).
- Boundary markers: Not explicitly defined in terms of system delimiters, but the skill enforces a structured synthesis template (SKILL.md).
- Capability inventory: Text analysis and persona generation; no subprocess or network-active tools are utilized by the skill scripts.
- Sanitization: None explicitly specified in the instructions.
Audit Metadata