industry-analysis
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external market sources and user-provided materials, which introduces an indirect prompt injection surface.
- Ingestion points: The skill processes "external market information" and "user provided materials" as stated in SKILL.md.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore instructions potentially embedded within these external sources.
- Capability inventory: The skill uses specific tools (
zhihuiya-connect,zhihuiya-connect2) to query patent counts and data, and generates Word/HTML reports. - Sanitization: There are no explicit instructions for sanitizing or validating the content fetched from external market sources.
- Context: As the primary purpose of the skill is to analyze external industry data, this surface is expected and controlled by the tool-based data fetching approach.
Audit Metadata