geo-content-research
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from untrusted external sources, creating a surface for indirect prompt injection. \n
- Ingestion points: As described in Phase 2 (AI Prompt Research) of
SKILL.md, the agent is instructed to mine content from Reddit, Quora, and general web search results to find real user queries and pain points. \n - Boundary markers: The instructions lack explicit boundary markers or directives for the agent to ignore potential instructions embedded within the external content retrieved from these sources. \n
- Capability inventory: The skill generates a
prompts.csvartifact intended for consumption by downstream automated pipelines, and it references capabilities in other skills such ascreate-geo-chartsandwrite-seo-geo-contentfor further action. \n - Sanitization: There are no instructions for sanitizing, filtering, or validating the content extracted from external sources before it is incorporated into the final output CSV.
Audit Metadata