local-market-research
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from social media and review platforms which could contain malicious instructions.\n
- Ingestion points: External data is fetched via google_maps_bulk_reviews, xiaohongshu_app_v2_search_notes, weibo_web_search, and tavily_search (SKILL.md).\n
- Boundary markers: The instructions do not provide explicit delimiters or warnings to ignore embedded instructions in the fetched data.\n
- Capability inventory: Capabilities are limited to data retrieval via sandbase_run (SKILL.md).\n
- Sanitization: No input sanitization or filtering logic is described in the skill instructions.
Audit Metadata