market-environment-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill leverages the
web_searchtool to ingest real-time market data from the internet. This external data is then processed to create market reports and assessments, creating an inherent attack surface for indirect prompt injection where malicious instructions on a target website could influence the agent's behavior. - Ingestion points: External market data and news fetched via
web_searchas defined in the core workflow ofSKILL.md. - Boundary markers: The instructions do not define specific delimiters or warnings to separate untrusted web content from the agent's internal reasoning or report generation logic.
- Capability inventory: The skill can execute local Python utility scripts (
scripts/market_utils.py) and perform network searches viaweb_search. - Sanitization: There is no evidence of sanitization or validation of the content retrieved from web searches before it is interpolated into the final market analysis report.
Audit Metadata