fiction-market-trend-analyst
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from the internet using
search_webandread_url_contenttools. This creates a surface for Indirect Prompt Injection, where malicious content embedded in web pages could attempt to influence the agent's behavior or output. - Ingestion points: Data retrieved from Goodreads, Wattpad, Webtoon, and general web searches.
- Boundary markers: None present; the instructions do not specify delimiters or warnings for the agent to ignore instructions embedded in the retrieved web content.
- Capability inventory: The skill has the capability to write files (
market_research_report.md) and execute a Python script (helpers/python/generate_market_keywords.py) that processes these files. - Sanitization: No explicit sanitization or validation of the web content is described before it is written to the report and processed by the script.
- [COMMAND_EXECUTION]: The skill uses a local Python script (
helpers/python/generate_market_keywords.py) to extract keywords from the generated report. Executing local scripts to automate workflows is a standard practice for complex skills, but it requires that the input data (the web research report) be handled safely to prevent command or argument injection if the script processes that data insecurely.
Audit Metadata