competitor-site-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external, untrusted websites, which creates a surface for indirect prompt injection if an attacker-controlled site contains malicious instructions.
- Ingestion points: The skill fetches up to six pages from a user-provided competitor URL in Step 3.
- Boundary markers: There are no explicit instructions to the agent to use delimiters or to ignore potential instructions embedded within the scraped website text.
- Capability inventory: The skill is capable of performing network fetches and presenting extracted information to the user; it does not have file-system write access or local command execution capabilities.
- Sanitization: The skill lacks explicit sanitization or filtering logic for the content it extracts from external pages.
Audit Metadata