funding-radar
Pass
Audited by Gen Agent Trust Hub on Jun 19, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill processes data from an external source (PredictLeads API), which presents a surface for indirect prompt injection.
- Ingestion points: External data enters the agent context via the
orth run predictleadscommand inSKILL.md. - Boundary markers: None identified. The instructions do not specify delimiters or warnings to ignore embedded instructions in the fetched data.
- Capability inventory: The skill reads data from an API and formats it into a summary for the user.
- Sanitization: No explicit sanitization or validation of the external API content is performed before interpolation into the final response.
Audit Metadata