customer-research
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and synthesize untrusted content from external sources such as Reddit, G2, and Capterra, which creates a surface for indirect prompt injection. Ingestion points: Online community posts, customer reviews, and interview transcripts are processed. Boundary markers: No explicit instructions are provided to use delimiters or ignore embedded instructions within the processed data. Capability inventory: The skill relies on the agent's internal capabilities for web searching and file reading; no custom scripts or external binaries are included. Sanitization: No data sanitization or validation steps are defined for the ingested research material.
- [EXTERNAL_DOWNLOADS]: The documentation references well-known research tools and platforms including Reddit, LinkedIn, SparkToro, Hacker News, and G2. These are provided for informational purposes only and do not trigger automated code execution or downloads of untrusted software.
- [NO_CODE]: The skill consists entirely of instructional markdown and evaluation data; no executable scripts, binaries, or source code files are included.
Audit Metadata