prospect-research

Pass

Audited by Gen Agent Trust Hub on Oct 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill involves gathering information from untrusted external sources such as LinkedIn, company websites, and press news (Phases 2 and 3). * Ingestion points: Web search tool calls during Phase 2 (Contact-Level Research) and Phase 3 (Account-Level Research). * Boundary markers: The instructions do not include explicit boundaries or warnings for the agent to disregard instructions potentially embedded in external web content. * Capability inventory: The agent's capabilities are restricted to text synthesis and brief generation; no tools for filesystem modification, shell access, or arbitrary network exfiltration are present. * Sanitization: No sanitization of ingested external data is mentioned. The impact of any potential injection is low due to the lack of privileged capabilities.
  • [NO_CODE]: The skill does not include any executable code, scripts, or package dependencies. It consists entirely of natural language instructions for research and reporting.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 11, 2026, 12:21 PM