codex-first-customer-finder-skill
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to download and install packages from external sources not belonging to a known trusted organization.
- Evidence: The installation section uses
npx --yes codex-first-customer-finder-skill@latestandgit clone https://github.com/Kappaemme-git/codex-first-customer-finder-skill.gitto obtain the skill code. - [INDIRECT_PROMPT_INJECTION]: The skill operates by ingesting data from arbitrary external sources, creating a potential surface for indirect prompt injection where malicious instructions hidden in those sources could influence the agent's behavior.
- Ingestion points: Startup URLs, product descriptions, GitHub repositories, and public discussion platforms (Reddit, niche forums, Twitter, LinkedIn) as specified in the
Usage PatternsandTroubleshootingsections. - Boundary markers: The provided instructions do not specify the use of delimiters or 'ignore' instructions when processing external content.
- Capability inventory: The skill can write files (HTML reports, CSV exports) and perform network searches to retrieve public signals.
- Sanitization: There is no evidence in the provided documentation of sanitization, validation, or escaping of the retrieved external content before it is processed by the AI or included in generated reports.
Audit Metadata