competitor-alternatives
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to perform research by mining reviews from external platforms like G2, Capterra, and TrustRadius, which involves ingesting untrusted third-party data.
- Ingestion points: The research process in
SKILL.mdexplicitly directs the agent to gather data from external review sites and competitor websites. - Boundary markers: There are no explicit delimiters or instructions provided to the agent to treat external content as untrusted or to ignore embedded instructions within that data.
- Capability inventory: The skill facilitates the creation of marketing content, comparison tables, and centralized YAML data files across multiple scripts and templates.
- Sanitization: The instructions do not include methods for sanitizing, validating, or filtering the content retrieved during the research phase.
Audit Metadata