startup-research
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple external sources which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: Data is ingested via
tavily_search,exa_search,linkedin_web_v2_company_posts, andapollo_company_news_search(SKILL.md, references/sandbase-api-map.md). - Boundary markers: The instructions do not define specific delimiters or instructions for the agent to ignore potential commands embedded in the retrieved search results or social media posts.
- Capability inventory: The agent can invoke tools via
sandbase_call_toolbased on research findings. - Sanitization: There is no mention of sanitizing, filtering, or validating the content retrieved from external search providers before processing it.
Audit Metadata