trends-keywords
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external URLs provided by the user to extract business context and search trends. This creates a surface for indirect prompt injection, where malicious content on the targeted website could attempt to influence or override the agent's instructions.
- Ingestion points: The
SKILL.mdfile defines tasks for 'Inspeção de Contexto' and 'Pesquisa Estratégica (Web Search)' which rely on user-supplied URLs and themes. - Boundary markers: The instructions lack explicit delimiters or 'ignore embedded instructions' warnings when processing the content fetched from the web.
- Capability inventory: The agent has the capability to perform web searches and generate structured strategic reports.
- Sanitization: There are no specific sanitization or validation steps mentioned for the content retrieved from external sources before it is used to generate the output.
Audit Metadata