icp-website-audit
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from untrusted external sources, creating a surface for indirect prompt injection attacks where malicious instructions on a website could influence agent behavior.\n
- Ingestion points: The skill crawls the client's website, competitor websites, search engine results, and third-party review sites (SKILL.md, Phase 2 & 3).\n
- Boundary markers: The instructions do not define boundary markers or explicit prompts to ignore instructions embedded within the fetched external content.\n
- Capability inventory: The agent has the capability to write files to the local filesystem (
clients/<client>/...), perform web searches, and fetch web content.\n - Sanitization: The process does not include steps to sanitize or validate external content before it is incorporated into the agent's reasoning or the final report.
Audit Metadata