competitive-ads-extractor
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's core functionality involves accessing public ad libraries (Facebook, LinkedIn) and saving analysis results and screenshots to local directories (e.g., '~/competitor-ads/'). These actions are transparently documented and align with the skill's utility for marketing research.
- [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection because it processes untrusted data from external ad platforms.
- Ingestion points: Data is scraped from third-party websites including Facebook Ad Library and LinkedIn.
- Boundary markers: The instructions do not provide explicit delimiters or instructions for the agent to treat scraped ad copy strictly as data rather than instructions.
- Capability inventory: The skill has the capability to write files to the filesystem and perform complex reasoning based on the scraped content.
- Sanitization: No validation or sanitization mechanisms are specified for the content extracted from external libraries before it enters the model context.
Audit Metadata