market-analyst
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize multiple sentiment analysis reports that are based on external, untrusted content from Reddit. While the skill focuses on structured data extraction, it lacks explicit sanitization or boundary markers to prevent potential instructions embedded in the input reports from influencing the agent's output.
- Ingestion points: Reads markdown reports from the
/docs/directory (reddit-sentiment-*.md) containing external user-generated content. - Boundary markers: Uses structured parsing logic (Likes, Dislikes, Wishes sections) to isolate data, but does not explicitly instruct the agent to ignore natural language instructions that might be present in the source text.
- Capability inventory: The skill performs file system read and write operations restricted to the
/docs/directory; it does not demonstrate network or shell execution capabilities. - Sanitization: There is no evidence of explicit content sanitization or escaping of the external data before it is interpolated into the final market analysis report.
Audit Metadata