customer-research
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze potentially untrusted external data, such as customer interview transcripts, survey results, support tickets, and online forum posts (Reddit, G2, etc.) as described in
SKILL.mdandreferences/source-guides.md. - Ingestion points: Data is processed in "Mode 1" (Existing Assets) and "Mode 2" (Online Signal) defined in
SKILL.md. - Capability inventory: The skill performs text analysis and synthesis; no evidence of dangerous shell commands, file writes, or network exfiltration based on the ingested content was found across
SKILL.mdor referenced files. - Boundary markers: The instructions do not explicitly mandate the use of delimiters or escaping for the external data being processed.
- Sanitization: No specific sanitization or filtering of external content is requested.
- [SAFE]: The skill accesses local configuration and context files (e.g.,
.agents/product-marketing.md) to inform its behavior, which is a standard pattern for context-aware AI agents. - [SAFE]: The skill provides links and search strategies for well-known services such as G2, Reddit, LinkedIn, and Hacker News in
references/source-guides.md. These are documented for legitimate research purposes and do not represent a security risk.
Audit Metadata