trend-to-product-mapper
Pass
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its processing of untrusted external content.
- Ingestion points: The skill reads files from
memory/market_insights/, which contain narratives and data extracted from public platforms like TikTok and Reddit. These sources may contain adversarial instructions designed to hijack the agent's behavior. - Boundary markers: The instructions lack explicit boundary markers or delimiters to separate the untrusted trend data from the agent's core instructions, increasing the likelihood of the agent obeying instructions embedded in the source text.
- Capability inventory: The skill has the capability to write new files to the filesystem (
memory/ideas/<slug>/idea.md). An attacker could potentially influence the content or structure of these generated files. - Sanitization: There is no logic or instruction provided to sanitize, escape, or validate the content of the trend analysis files before they are processed by the agent.
Audit Metadata