competitor-alternatives
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No malicious patterns or security risks were identified in the skill. All files are purely informational markdown documents.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No hardcoded credentials, API keys, or unauthorized access to sensitive file paths were detected. The skill instructions focus on publicly available marketing data.
- [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill does not include any external dependencies, package installations, or remote script execution commands.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a surface for processing untrusted data during competitor research.
- Ingestion points: External competitor review sites (G2, Capterra) and the local marketing context file specified in SKILL.md.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the skill templates.
- Capability inventory: The skill performs no high-risk operations; it has no access to shell commands, network exfiltration tools, or dynamic code execution.
- Sanitization: No sanitization or validation of the ingested marketing data is performed. Given the lack of executable capabilities, this ingestion surface is considered safe.
Audit Metadata