paw-mkt-sales
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources such as competitor websites, G2 reviews, and social media profiles via
agent-browserandWebFetch(as seen inreferences/competitive-research.md). - Ingestion points: Browser output from pricing pages, review platforms, and search results.
- Boundary markers: No explicit delimiters or system instructions to ignore embedded instructions in external data are present in the provided reference files.
- Capability inventory: The skill utilizes
agent-browserfor navigation and data extraction, andWebFetch/WebSearchas fallback tools. - Sanitization: There are no defined sanitization or filtering protocols for the ingested content before it is processed into the agent's context.
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of the
agent-browserutility from Vercel Labs' public repository. This download is used to enable the competitive research capabilities of the agent. - [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands to initialize browser sessions, manage authentication profiles, and perform automated research tasks using the
agent-browserCLI tool.
Audit Metadata