competitor-profiling
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection.
- Ingestion points: External content is fetched via
firecrawl_scrapeandfirecrawl_searchfrom competitor websites and review platforms (G2, Capterra). - Boundary markers: The instructions do not specify any delimiters or instructions for the agent to ignore commands that might be embedded in the scraped data.
- Capability inventory: The agent is authorized to write markdown files to the local directory
competitor-profiles/. - Sanitization: No sanitization or validation of the ingested external content is performed before it is synthesized into profile documents.
- [EXTERNAL_DOWNLOADS]: The skill performs data retrieval from well-known external services. It utilizes Firecrawl for site mapping and content scraping, and DataForSEO for gathering search engine performance metrics and backlink data.
Audit Metadata