paw-mkt-paid-ads
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external websites (such as competitor ad libraries and landing pages) using the
agent-browsertool, as well as local brand context files. This data is processed to generate marketing deliverables like campaign briefs and ad copy. - Ingestion points: External website content is fetched via
agent-browserinreferences/competitive-research.md, and local files such asbrand-context.mdare read as described inSKILL.md. - Boundary markers: The instructions do not define explicit boundary markers or delimiters to separate ingested external data from the agent's core instructions.
- Capability inventory: The skill has the ability to perform network operations and execute JavaScript on external sites via
agent-browser, and it writes deliverables to the local.pawbytes/directory. - Sanitization: There is no description of sanitizing, filtering, or escaping the external content before it is interpolated into the agent's context.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
agent-browsertool from a public registry or a trusted GitHub repository if it is not already present in the environment. - Evidence: The file
references/shared-patterns.mdsuggests usingnpx skills add https://github.com/vercel-labs/agent-browserto install the required automation tool. - [COMMAND_EXECUTION]: The skill utilizes shell commands to perform browser automation, verify tool availability, and manage software packages.
- Evidence:
references/competitive-research.mdandreferences/shared-patterns.mdcontain specific command lines foragent-browser,npx,npm, and local discovery scripts.
Audit Metadata