discover-patent-white-space-opportunities
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data in the form of patent maps and lists, which are subsequently processed and used to generate a self-contained HTML report. This presents a theoretical surface for indirect prompt injection or content injection in the output report.
- Ingestion points: Patent maps and underlying patent lists provided by the user (SKILL.md, Stage 1).
- Boundary markers: Absent; data is processed into specific categories and templates without explicit delimiters or instructions to ignore embedded commands within the raw data.
- Capability inventory: The skill has the capability to write files to the session reports directory (SKILL.md, Stage 8).
- Sanitization: There are no explicit instructions for the agent to sanitize or escape data before embedding it into the HTML report, though the analytical focus on structural anomalies reduces the likelihood of executing instructions within the data.
Audit Metadata