market-researcher
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists entirely of natural language instructions and does not include any executable scripts, binary files, or package management files.
- [SAFE]: The analysis found no evidence of credential harvesting, obfuscation, or malicious command execution. The content is consistent with a professional market research tool.
- [INDIRECT_PROMPT_INJECTION]: The skill's function involves processing external data (e.g., consumer trends, competitive intelligence), which creates a potential surface for indirect prompt injection. Evidence Chain: 1. Ingestion points: Reviewing industry data and consumer trends (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: No specific tools, network scripts, or file-writing capabilities are defined in this skill. 4. Sanitization: The instructions explicitly require the agent to verify data accuracy and maintain authoritative sources, which serves as a basic mitigation strategy.
Audit Metadata