competitive-pricing
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external sources including competitor pricing pages, Google Shopping, and Amazon listings.
- Ingestion points: Data enters the agent's context through tools like
firecrawl_scrape,strale_pricing_page_extract,google_shopping_bulk_products, andamazon_bulk_product_detailsdefined inSKILL.mdandreferences/sandbase-api-map.md. - Boundary markers: The instructions lack explicit delimiters or safety guidelines directing the agent to ignore instructions embedded within the scraped content.
- Capability inventory: The skill has capabilities to perform web scraping and data extraction through the SandBase gateway.
- Sanitization: There is no evidence of sanitization or validation of the external content before it is processed by the agent.
Audit Metadata