competitor-intel
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from public social media sources (Reddit, Twitter/X, and LinkedIn) for processing into competitor profiles and reports.
- Ingestion points: Raw scraped data from social media platforms is stored in the
competitor-intel/raw-data/directory. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded prompts within the scraped content.
- Capability inventory: The agent uses this data during deep research sessions (
setup_competitor.py) and automated report generation (run_daily.py,run_weekly.py,generate_report.py). - Sanitization: There is no evidence of sanitization or filtering of the ingested social media content before it is processed by the agent.
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute local Python scripts located in the
competitor-intel/scripts/directory to perform monitoring and reporting tasks.
Audit Metadata