competitor-profiling

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection.
  • Ingestion points: External content is fetched via firecrawl_scrape and firecrawl_search from competitor websites and review platforms (G2, Capterra).
  • Boundary markers: The instructions do not specify any delimiters or instructions for the agent to ignore commands that might be embedded in the scraped data.
  • Capability inventory: The agent is authorized to write markdown files to the local directory competitor-profiles/.
  • Sanitization: No sanitization or validation of the ingested external content is performed before it is synthesized into profile documents.
  • [EXTERNAL_DOWNLOADS]: The skill performs data retrieval from well-known external services. It utilizes Firecrawl for site mapping and content scraping, and DataForSEO for gathering search engine performance metrics and backlink data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 07:44 AM