keyword-research
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to mine external data from sources such as Reddit, Quora, and competitor blogs. This ingestion of untrusted third-party content creates a surface for indirect prompt injection attacks where malicious actors could embed instructions intended to manipulate the agent's behavior.
- Ingestion points: SKILL.md (sections including Reddit/Quora Mining and Competitor Content Gaps).
- Boundary markers: The instructions do not specify any delimiters or safety warnings to separate external research data from the agent's core operational instructions.
- Capability inventory: The skill itself is purely instructional and does not include scripts, network tools, or file system access capabilities.
- Sanitization: There are no requirements defined for sanitizing, filtering, or validating the content retrieved from external websites.
Audit Metadata