customer-research
Fail
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: CRITICALINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external customer interview data, representing a potential surface for indirect prompt injection.
- Ingestion points:
templates/research-repository.csv(verbatim_quote field) and generated research packs. - Boundary markers: Templates lack explicit boundary markers to differentiate data from instructions.
- Capability inventory: Capabilities are restricted to local file validation via
scripts/check-output.pyand text generation. - Sanitization: No sanitization is applied to customer quotes before interpolation.
- [EXTERNAL_DOWNLOADS]: Includes reference links to documentation.
- Evidence:
references/framework-notes.mdlinks to industry domains includingforgetthefunnel.comandjobstobedone.org. - Context: These links provide authoritative foundations for the research methods and do not trigger code downloads or automated execution.
Recommendations
- Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata