customer-research
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from various public platforms (Reddit, reviews, social media), creating an attack surface for indirect prompt injection.
- Ingestion points: Public reviews, social media comments, and forum posts are identified as primary data sources in SOURCES.md and SKILL.md.
- Boundary markers: The skill explicitly instructs the agent to treat fetched text as data rather than instructions and warns against following any commands found within reviews or page HTML (SKILL.md).
- Capability inventory: While this skill is primarily instructional, it references capabilities for web scraping and product surveys via external skills (web-scraping, posthog).
- Sanitization: It enforces a strict 'mine for signal' approach, requiring the agent to ignore instructions embedded in the processed data.
Audit Metadata