patent-infringement-watch
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from untrusted external sources, which represents a potential surface for indirect prompt injection.
- Ingestion points: Technical features are extracted from user-uploaded product files (PDF/Word/TXT) in
Step 1and from external web content (competitor websites, news, and industry reports) inStep 3. - Capability inventory: The skill utilizes tools for reading local files (
files), searching the web (web.search,web_fetch), and querying the PatSnap patent database (patent.search,patent.fetch). - Boundary markers: The instructions do not specify the use of clear delimiters or explicit instructions to ignore commands that may be embedded within the ingested product descriptions or web search results.
- Sanitization: No specific data validation or filtering mechanisms are described for the external content before it is processed by the agent to extract technical characteristics.
Audit Metadata