market-research
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted third-party content from web searches and reports, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: External data is retrieved from web pages, snippets, and reports during the secondary research phase (SKILL.md).
- Boundary markers: The instructions explicitly command the agent to treat all retrieved content as data rather than instructions and to ignore any text attempting to redirect agent behavior.
- Capability inventory: The skill has the capability to write files to the
research/directory or the current folder (SKILL.md). - Sanitization: The agent is instructed to report suspicious content to the operator as a finding rather than executing it and to treat the source as untrustworthy.
- [COMMAND_EXECUTION]: The skill documentation provides shell commands for the user to install related skills using the
npxpackage runner. - Evidence:
npx skills add pedroromeroluna/ai-first-product-skills(SKILL.md).
Audit Metadata