Web Performance
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill requires the agent to ingest and analyze external URLs or page templates, which constitutes an indirect prompt injection surface. Maliciously crafted content on target pages could attempt to influence agent behavior during analysis.
- Ingestion points: The audit process gathers URL(s) or page templates in Step 1.
- Boundary markers: No instructions are provided to the agent to isolate or ignore instructions embedded within the analyzed web content.
- Capability inventory: The skill is diagnostic and does not instruct the agent to perform autonomous file writes, shell execution, or secondary network operations.
- Sanitization: There is no requirement for validating or filtering content retrieved from the target URLs before processing.
Audit Metadata