bd-tracker-updater
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to extract information from potentially untrusted sources, such as external company research reports and unstructured user data, to populate API payloads.
- Ingestion points: Data enters the agent's context through research reports or raw unstructured text as defined in
org-creation/SKILL.md(Step 2A). - Boundary markers: The instructions lack specific delimiters or guardrails to prevent the agent from following instructions that might be embedded within the research reports being processed.
- Capability inventory: The skill is capable of performing network POST operations to endpoints defined by the
$BD_Tracker_Base_URLand$BD_Tracker_Endpointenvironment variables (Step 5). - Sanitization: While the skill performs basic formatting and business-logic validation on fields (e.g., extracting domains from URLs or numeric values from currency strings), it does not explicitly sanitize the input for malicious prompt patterns.
Audit Metadata