market-environment-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and interpret data from the internet, creating an attack surface for indirect prompt injection.
- Ingestion points:
SKILL.mdinstructs the agent to use theweb_searchtool to collect market data from various external websites and media outlets. - Boundary markers: The instructions lack explicit delimitation or warnings to ignore potential instructions embedded within the retrieved market data.
- Capability inventory: The skill environment allows for the execution of a local Python script (
scripts/market_utils.py) and the use of theweb_searchtool. - Sanitization: No sanitization logic is implemented in the provided scripts or instructions to handle potentially malicious content in the search results.
Audit Metadata