competitor-profiling
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from untrusted external sources, specifically competitor websites and third-party review platforms, through the
firecrawl_scrapeandfirecrawl_searchtools. - Ingestion points: Data is ingested from competitor URLs, including homepages, pricing pages, and product documentation (SKILL.md, Phase 1).
- Boundary markers: While the skill prescribes saving data to raw files for auditing, it does not explicitly instruct the agent to use boundary markers or delimiters when interpreting this content during the synthesis phase.
- Capability inventory: The skill performs file writes to the
competitor-profiles/directory and accesses external SEO APIs. It does not possess capabilities for arbitrary command execution or system-level configuration changes. - Sanitization: The research process does not describe specific sanitization steps for the scraped markdown content before it is processed by the agent.
Audit Metadata