market-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites through the WebSearch tool in Phase 2, creating a surface for indirect prompt injection where malicious content on those pages could attempt to influence the agent's output.
- Ingestion points: Results from market research aggregators and public datasets identified in SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded commands within search results.
- Capability inventory: The skill is limited to reading data and generating markdown reports; it does not perform dangerous system-level operations.
- Sanitization: No specific sanitization or validation logic is defined for the content retrieved from the web.
- [NO_CODE]: The skill consists entirely of markdown documentation and YAML configuration. It does not ship with any Python scripts, Node.js modules, or binary executables, which significantly reduces its direct attack surface.
Audit Metadata