seo-competitor-pages
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external websites, creating a surface for indirect prompt injection attacks.
- Ingestion points: External competitor content is ingested through the
WebFetchtool as specified in theallowed-toolsconfiguration and the skill's operational logic. - Boundary markers: The instructions lack explicit delimiters or instructions to the agent to disregard potential prompt injections embedded in the fetched HTML or markdown content.
- Capability inventory: The skill is configured with access to the
Bashtool (shell command execution) and file system tools includingRead,Grep, andGlob. - Sanitization: There is no documented process for sanitizing or filtering external content before it is interpolated into the agent's context.
Audit Metadata