content-gap-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to crawl and inventory content from external domains and competitor sitemaps, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: External sitemap files (
sitemap.xml) and web content files (markdown, CMS entries). - Boundary markers: None provided to distinguish between instruction and external data.
- Capability inventory: Network access via
curlto fetch external data and external API results. - Sanitization: No explicit sanitization or filtering of fetched external content is described.
- [EXTERNAL_DOWNLOADS]: The skill performs network operations to fetch configuration and data from an external service.
- Details: Fetches organic keyword data and competitive intelligence from the SemRush API.
Audit Metadata