market-copy
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a vulnerability to indirect prompt injection by ingesting untrusted data from external URLs.
- Ingestion points: The skill uses
WebFetchto retrieve and parse content from user-provided URLs inSKILL.mdunder Phase 1. - Boundary markers: There are no specified delimiters (e.g., XML tags or triple backticks) or explicit instructions to the agent to disregard instructions found within the fetched content.
- Capability inventory: The skill possesses network read capabilities (
WebFetch) and file-writing capabilities (creatingCOPY-SUGGESTIONS.md). - Sanitization: There is no evidence of content validation or filtering of the HTML/text retrieved from target pages before it is processed by the analysis frameworks.
Audit Metadata