customer-review-aggregator
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to aggregate and analyze customer feedback from various external and untrusted sources such as G2, Trustpilot, Reddit, and Twitter.
- Ingestion points: Data collection methods specified in
references/intake-prompts.mdinclude manual pasting, CSV file uploads, and URL fetching via WebFetch, all of which introduce external content into the agent's context. - Boundary markers: The skill does not define specific delimiters or instructional boundaries to prevent the agent from potentially following malicious instructions embedded within the reviews being analyzed.
- Capability inventory: The skill performs extensive processing including sentiment scoring, feature extraction, and report generation, which could be influenced by adversarial content in the reviews.
- Sanitization: There are no documented steps for sanitizing, filtering, or validating the integrity of the review data before it is processed by the agent.
Audit Metadata