review-mining
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to mine and analyze reviews from various external platforms, creating a surface for indirect prompt injection where malicious instructions could be embedded in public review text.
- Ingestion points: External websites (Trustpilot, G2, Capterra, Product Hunt, App Store, Play Store, Reddit, Hacker News) as specified in
SKILL.md. - Boundary markers: Absent. The instructions do not specify delimiters or warnings to ignore instructions embedded within the fetched reviews.
- Capability inventory: Browsing, text synthesis, and report generation (markdown file writing).
- Sanitization: Absent. There are no instructions to sanitize, validate, or filter the collected review data for potential prompt injection attacks.
Audit Metadata