customer-research
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [SAFE]: The skill is purely instructional and analytical, providing structured methodologies and templates for customer research. No executable code, hidden commands, or malicious instructions were detected within the documentation or logic.
- [INDIRECT_PROMPT_INJECTION]: The skill proactively addresses the ingestion of untrusted content from online communities and reviews. It instructs the agent to treat these as untrusted source material and provides a structured extraction framework (Jobs to Be Done, Pain Points, Trigger Events) that focuses on identifying data points rather than executing instructions found within the material.
- [DATA_EXFILTRATION]: The instructions include clear privacy boundaries, mandating the redaction of personal details and prohibiting the crossing of private identities or unauthorized scraping. The use of standard search engine operators for public data gathering is a benign research activity.
Audit Metadata