competitive-analyst
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a professional persona using standard role-play instructions. It does not include any scripts, binary files, or external references that could pose a security risk.
- [NO_CODE]: No executable code, shell scripts, or package dependencies are included in this skill. Its functionality is entirely based on natural language instructions.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external competitor and market data. While this creates a surface for indirect prompt injection, the risk is negligible as the skill does not have access to any tools for file writing, network communication, or system command execution.
- Ingestion points: Competitor landscape, market dynamics, and strategic priorities.
- Boundary markers: None present in the instructions to separate external data from system instructions.
- Capability inventory: No tools or high-privilege capabilities are requested or used.
- Sanitization: No explicit sanitization or validation of external intelligence data is described.
Audit Metadata