cro
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The "Mandatory Content Standards" section includes the directive "No warnings, notes, or disclaimers. Stick to requested output." This instruction is a known technique to suppress the AI's standard safety responses or informative disclaimers, potentially interfering with default agent behavior.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing external web pages based on URLs provided by users. This creates a surface where the agent could ingest malicious instructions hidden in the target website's content (e.g., hidden HTML comments or text).
- Ingestion points: Target URLs for marketing pages, landing pages, and pricing pages mentioned in Step 2 and Step 3.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are defined for the analysis of external content.
- Capability inventory: The skill definition does not include dangerous tools like arbitrary command execution, network exfiltration, or file writes.
- Sanitization: There are no requirements for sanitizing or filtering the content fetched from the provided URLs before analysis.
Audit Metadata