competitor-price-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to monitor and process data from external competitor pricing pages. This creates an attack surface for indirect prompt injection, where malicious instructions embedded in the target web pages could potentially influence the agent's behavior.
- Ingestion points: External competitor pricing pages and promotional content (SKILL.md).
- Boundary markers: None defined to isolate external data from instructions.
- Capability inventory: Primarily involves reading and analyzing web content; specific tool permissions are not restricted in the frontmatter.
- Sanitization: No specific filtering or validation instructions are provided for the external data being processed.
Audit Metadata