competitor-positioning

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard system utilities including date, ls, cat, mkdir, and python3 for environment discovery, date calculation, and local profile management.\n- [DYNAMIC_EXECUTION]: The instructions contain Python code snippets used to update the last_runs timestamp in the business-profile.json file and to calculate historical date windows for search queries.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content retrieved from external competitor websites. While this presents a potential injection surface, it is necessary for the skill's primary function of marketing analysis.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the @nimble-way/nimble-cli package, which is a vendor-provided tool required for operation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:55 PM