customer-research
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of Markdown reference files and instructions. No executable code, shell scripts, or automated tool invocations were detected within the skill files.
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to process and analyze content from external, untrusted sources such as customer interview transcripts, Reddit forums, and third-party review sites, which introduces a surface for indirect prompt injection.
- Ingestion points: External research data sources described in SKILL.md and references/source-guides.md.
- Boundary markers: Absent; the instructions do not prescribe the use of delimiters or specific safety markers for handling external text.
- Capability inventory: The agent's capabilities are focused on text processing, synthesis, and persona generation.
- Sanitization: Absent; no validation or sanitization steps are defined for the analysis of external research assets.
Audit Metadata