competitor-pages
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and analyze content from external URLs (competitor pages) provided by the user. This creates a surface for indirect prompt injection, where an attacker could place malicious instructions on a webpage to influence the agent's behavior when it processes that page.
- Ingestion points: Untrusted competitor URLs provided via the
argument-hintfield. - Boundary markers: None. The instructions do not specify any delimiters or warnings to treat the content of the analyzed pages as untrusted data.
- Capability inventory: The skill instructs the agent to read and follow instructions from a relative path (
../../seo/competitor-pages/SKILL.md) and produce content briefs, which involves synthesizing and outputting data from the untrusted sources. - Sanitization: None. There is no mention of filtering or sanitizing the content fetched from the external URLs before it is processed by the agent.
Audit Metadata