product-marketing-context

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides procedures to download the agent-browser tool from the vercel-labs GitHub repository and the npm registry. These downloads originate from a recognized organization.
  • [COMMAND_EXECUTION]: The instructions include shell commands to install software dependencies, specifically agent-browser and the Playwright Chromium browser, to support research tasks.
  • [PROMPT_INJECTION]: The skill establishes a surface for indirect prompt injection by ingesting untrusted data from live URLs, public sites, and third-party review platforms (e.g., Reddit, G2, Capterra). The instructions lack explicit boundary markers or sanitization logic for this external content, which is incorporated into the positioning documents. The impact is limited by the skill's primary function of markdown file generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 07:17 PM