market-audit
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
python3 scripts/analyze_page.py <url>to retrieve site data. While this is the primary mechanism for the audit, it introduces a potential point for command injection if the environment does not sanitize the user-provided URL before shell execution.\n- [EXTERNAL_DOWNLOADS]: The skill fetches external website content for analysis. This is a standard and necessary function for a site auditing tool.\n- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection as it processes untrusted HTML and text from external URLs. Evidence chain for indirect injection surface:\n - Ingestion points: SKILL.md Phase 1 (fetching the URL content via script).\n
- Boundary markers: Absent. There are no explicit instructions or delimiters used to warn subagents about potentially adversarial instructions embedded in the audited data.\n
- Capability inventory: The subagents are limited to analysis and reporting within a generated markdown file; no high-privilege capabilities (e.g., file writes, network exfiltration) are linked to the ingested data processing in the instructions.\n
- Sanitization: No sanitization or filtering of the fetched page content is described in the workflow.
Audit Metadata