account-research
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted data from the open web.
- Ingestion points: The skill retrieves data from web searches, enrichment APIs, and CRM databases as specified in the 'Execution Flow' section of SKILL.md.
- Boundary markers: The prompt instructions lack explicit delimiters or 'ignore embedded instructions' warnings to prevent the agent from obeying commands found within search results or external data.
- Capability inventory: The skill is primarily focused on data synthesis and reporting; no high-risk capabilities such as subprocess execution, file system writes, or direct network exfiltration were detected in the instructions.
- Sanitization: There are no instructions for sanitizing or escaping the content retrieved from external sources before it is processed by the agent.
Audit Metadata