lead-research-assistant
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted data from both external web sources and local repositories.
- Ingestion points: In SKILL.md (Instructions 1 and 3), the agent is directed to analyze local codebase files to understand the product and to search for company data using external sources like job postings, tech stacks, and news articles.
- Boundary markers: Absent. The skill instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings when handling content from the web or local files, making it susceptible to instructions hidden within that data.
- Capability inventory: The skill requires file system read access for repo analysis and network search capabilities for lead identification.
- Sanitization: Absent. There are no mechanisms described to validate, filter, or sanitize the content retrieved from external research sources.
Audit Metadata