pricing-page-analyzer
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process content from external competitor websites using extraction tools. This creates an attack surface where malicious instructions could be embedded in a target webpage to influence the agent's subsequent analysis or actions.
- Ingestion points: competitor websites accessed via
strale_pricing_page_extractandcontext_dev_extract_structured_data(identified in SKILL.md). - Boundary markers: The instructions do not define specific delimiters or "ignore instructions" wrappers for the retrieved content.
- Capability inventory: The skill involves tool calls (
sandbase_call_tool) to extract and process data, though it lacks direct file-write or shell execution capabilities in the analyzed scripts. - Sanitization: No explicit sanitization or content filtering is described for the external data before it is processed by the agent.
Audit Metadata