market-report

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill is designed to ingest and process data from various external markdown files (e.g., MARKETING-AUDIT.md, SEO-AUDIT.md, COMPETITOR-ANALYSIS.md) to generate a final report. It does not implement boundary markers or instructions to disregard embedded commands within these files, which is a standard surface for indirect prompt injection.
  • Ingestion points: Data collection instructions in Step 1 of SKILL.md specify reading 10+ different audit files.
  • Boundary markers: None present; the skill does not wrap external data in delimiters or provide safety instructions for processing it.
  • Capability inventory: The skill utilizes file system write capabilities to create the final MARKETING-REPORT.md.
  • Sanitization: No validation or filtering is performed on the content of the ingested files before they are summarized into the final report.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 12:07 PM
Security Audit — agent-trust-hub — market-report