customer-research
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions define workflows for ingesting and synthesizing external, untrusted data from multiple sources, which creates a vulnerability to indirect prompt injection attacks where malicious instructions could be embedded in the analyzed content to influence the agent's behavior.
- Ingestion points: The skill reads local transcript and survey files (Mode 1) and instructs the agent to fetch data from various external platforms including Reddit, G2, Hacker News, and LinkedIn (Mode 2) as detailed in
SKILL.mdandreferences/source-guides.md. - Boundary markers: The instructions lack the use of delimiters (such as XML tags or specific markdown blocks) or explicit warnings to the agent to ignore any instructions found within the research data.
- Capability inventory: The skill primarily performs analysis and synthesis but coordinates with other skills (e.g.,
copywriting,cro) that may possess broader capabilities like file modification. - Sanitization: No validation or sanitization steps are defined to filter out potentially malicious content from the ingested text before it is processed by the LLM.
Audit Metadata