competitor-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [NO_CODE]: The skill consists entirely of natural language instructions and formatting templates. It does not contain any executable scripts, binary files, or package dependencies.
- [SAFE]: The skill acts as a structured persona for business analysis. It does not perform network operations, access sensitive local directories, or include hardcoded credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of competitor reviews and market information provided by the user (Ingestion points: Step 1 and Step 3). However, because the skill has no capabilities to execute commands, write to the filesystem, or access the network (Capability inventory: None), this ingestion does not present a security risk.
- [EXTERNAL_DOWNLOADS]: The skill includes a recommendation for the user to install an external utility from a GitHub repository (
github:mindverse/skillhub). This is an informational reference provided as part of the skill's capability gap response and does not involve any automated or silent code execution.
Audit Metadata