monitor-competitor-patent-landscape-ip
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted patent data (titles, abstracts, claims) retrieved via MCP tools.
- Ingestion points: Patent records enter the system through Step 2 and Step 4 of the workflow as described in SKILL.md and references/workflow_guide.md.
- Boundary markers: The instructions in SKILL.md and references/workflow_guide.md explicitly require data escaping to prevent rendering vulnerabilities.
- Capability inventory: The skill uses scripts/generate_report.py to write files to the local disk.
- Sanitization: The Python renderer uses html.escape on all data and restricts URL protocols to http/https.
Audit Metadata