first-customer-finder
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bundled Python script (
scripts/generate_report.py) to transform gathered research data into a formatted HTML report. This script is limited to local data processing and uses standard libraries only. - [PROMPT_INJECTION]: As the skill processes external web content for research purposes, it is subject to indirect prompt injection. This risk is addressed through clear instructions for the agent to paraphrase content and the implementation of strict HTML escaping in the provided reporting script to prevent cross-site scripting (XSS) within the generated output.
Audit Metadata