30x-seo-competitor-pages
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch external data using
WebFetchto populate comparison tables and feature matrices. This creates a surface for indirect prompt injection if the fetched content (competitor websites or documentation) contains malicious instructions designed to influence the agent's behavior. - Ingestion points: SKILL.md (Instructions to use WebFetch and Read tools to gather competitor data).
- Boundary markers: Absent. No explicit instructions are provided to the agent to ignore or delimit instructions found within the fetched external data.
- Capability inventory: WebFetch (network read), Read (filesystem/data read).
- Sanitization: Absent. There are no requirements for validating or filtering the content retrieved from external sources before processing it.
Audit Metadata