lp-competitor
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill fetches content from external URLs, creating an attack surface for indirect prompt injection where malicious instructions on a website could influence the agent's behavior.\n
- Ingestion points: External web content retrieved via
web-fetchin the information gathering stage.\n - Boundary markers: The skill does not implement delimiters or instructions to isolate the untrusted web content from the agent's core instructions.\n
- Capability inventory: The agent has access to
bash,write, andedittools, which increases the potential impact of a successful injection.\n - Sanitization: No sanitization or filtering of the fetched content is specified before it is analyzed by the model.\n- [EXTERNAL_DOWNLOADS]: The skill core functionality relies on fetching data from arbitrary external URLs to perform teardowns.
Audit Metadata