competitor-ad-tracking
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The instructions direct the user to install the
scrapesocialpackage globally via NPM to enable ad extraction capabilities. - [COMMAND_EXECUTION]: The skill utilizes shell commands for directory management (
mkdir -p) and output redirection (>) to store research data, alongside executing thescrapesocialCLI for network-based data retrieval. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and analyzes data from external, third-party ad platforms which could contain malicious or adversarial instructions.
- Ingestion points: Retrieves headlines, body copy, and video transcripts from the Meta, Google, LinkedIn, and Reddit ad libraries.
- Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore embedded prompts within the scraped ad content.
- Capability inventory: The skill includes file system write access and network operations through the integrated CLI.
- Sanitization: No specific mechanisms for sanitizing or validating the retrieved ad metadata are described.
Audit Metadata