customer-research
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data from various sources, including customer interview transcripts, surveys, support tickets, and online communities like Reddit and G2. This creates a surface for indirect prompt injection where malicious instructions could be embedded in the data being analyzed.
- Ingestion points: SKILL.md specifies analyzing raw research materials (transcripts, surveys, reviews, tickets) and gathering intel from online platforms (Reddit, G2, Hacker News, etc.) as detailed in Mode 1 and Mode 2.
- Boundary markers: The instructions do not specify any boundary markers or delimiters (e.g., XML tags, triple backticks) to separate untrusted data from instructions, nor do they include warnings for the agent to ignore instructions embedded within the processed content.
- Capability inventory: The skill focus on analysis and synthesis, but instructions to extract verbatim quotes increase the risk of the agent following instructions contained within the analyzed data.
- Sanitization: There are no instructions for sanitizing, escaping, or filtering the content ingested from external sources.
Audit Metadata