mine-competitor-reviews
Pass
Audited by Gen Agent Trust Hub on Aug 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
app-store-scraperpackage from the official NPM registry to automate the collection of application reviews.\n- [COMMAND_EXECUTION]: The skill provides a shell command to execute a Node.js script (node -e) that imports the scraper library and outputs review data in JSON format.\n- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection due to its core function of processing untrusted external data.\n - Ingestion points: The skill instructions in
SKILL.mdoutline pulling content from public App Store reviews and social media platforms (Reddit, X, Trustpilot).\n - Boundary markers: The provided categorization framework and output templates do not specify the use of delimiters or 'ignore' instructions to prevent the agent from obeying commands embedded within the fetched reviews.\n
- Capability inventory: The skill utilizes shell command execution (
node -e) for data acquisition and local file-system writes for saving research results.\n - Sanitization: There are no described mechanisms for sanitizing or escaping the content of the reviews before they are passed to the language model for categorization and pattern extraction.
Audit Metadata