deep-company-analyser
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and process untrusted data from external sources such as company websites and review platforms.
- Ingestion points: SKILL.md (Step 1 and Step 2 instructions for reading external URLs).
- Boundary markers: Absent. There are no instructions or delimiters to isolate the retrieved data or prevent the agent from executing instructions found within the scraped content.
- Capability inventory: The skill leverages the agent's ability to browse and retrieve content from external network URLs.
- Sanitization: Absent. No validation or filtering is specified for the content retrieved from external sources.
- [NO_CODE]: The skill consists entirely of natural language instructions in a markdown file and does not include any executable scripts or configuration files.
Audit Metadata