customer-research

Fail

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: CRITICALINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external customer interview data, representing a potential surface for indirect prompt injection.
  • Ingestion points: templates/research-repository.csv (verbatim_quote field) and generated research packs.
  • Boundary markers: Templates lack explicit boundary markers to differentiate data from instructions.
  • Capability inventory: Capabilities are restricted to local file validation via scripts/check-output.py and text generation.
  • Sanitization: No sanitization is applied to customer quotes before interpolation.
  • [EXTERNAL_DOWNLOADS]: Includes reference links to documentation.
  • Evidence: references/framework-notes.md links to industry domains including forgetthefunnel.com and jobstobedone.org.
  • Context: These links provide authoritative foundations for the research methods and do not trigger code downloads or automated execution.
Recommendations
  • Contains 2 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 10, 2026, 12:53 PM