csuite

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides shell commands intended for legitimate research purposes, such as checking competitor activity and market trends. These commands use curl to fetch data from well-known platforms (GitHub, Reddit, Stack Overflow, Hacker News) and use standard Python one-liners for data parsing. These actions are aligned with the skill's purpose for executive decision support.
  • [PROMPT_INJECTION]: The skill includes workflows for processing data from external sources, creating a surface for indirect prompt injection. This is a common characteristic of research-oriented skills.
  • Ingestion points: Workflows in references/competitive-mapping.md, references/market-positioning.md, and references/trend-analysis.md ingest external content via RSS feeds and public APIs.
  • Boundary markers: The skill does not explicitly define boundary markers or specify instructions to ignore embedded commands in the ingested external data.
  • Capability inventory: The skill utilizes Bash, Read, and Write tools for its operations.
  • Sanitization: No specific sanitization or validation methods for the ingested external content are described.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 12:34 PM
Security Audit — agent-trust-hub — csuite