marketing-guerrilla
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the 'agent-browser' dependency from the Vercel Labs official GitHub repository, which is a trusted source.
- [COMMAND_EXECUTION]: Employs the 'agent-browser' CLI to automate navigation and data extraction from platforms such as Google Trends, YouTube, Reddit, and TikTok for marketing intelligence.
- [PROMPT_INJECTION]: Ingests text content from external web platforms during the research phase, which presents an indirect prompt injection surface. Mandatory Evidence Chain:
- Ingestion points: Web text retrieved via 'agent-browser get text body' (SKILL.md).
- Boundary markers: Not explicitly utilized to separate external web content from instructions.
- Capability inventory: Executes shell commands via 'agent-browser' and performs local file writes to brand-specific paths (SKILL.md).
- Sanitization: External web content is processed by the agent without prior filtering or escaping.
Audit Metadata