paw-mkt-content
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches and installs the
agent-browsertool from Vercel Labs' repository on GitHub to enable automated research capabilities. - [COMMAND_EXECUTION]: The skill invokes local shell scripts, specifically
tool-discovery.shandchrome-profiles.sh, to check for required system dependencies and identify paths for browser profiles used in research sessions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from various external web sources, creating a potential vulnerability to indirect prompt injection.
- Ingestion points: The
agent-browsertool is used to retrieve text from Google Search, Answer The Public, Reddit, Quora, and competitor blogs as defined inreferences/content-research.md. - Boundary markers: No delimiters or explicit instructions to ignore embedded commands are present in the research logic.
- Capability inventory: The skill has the ability to execute shell commands (
shared-patterns.md) and write to the local file system (workflow.md). - Sanitization: There is no evidence of filtering, escaping, or validation of the content retrieved from external sites before it is processed by the agent.
- Ingestion points: The
Audit Metadata