competitor-profiling

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by ingesting and processing untrusted data from arbitrary external competitor websites.
  • Ingestion points: The firecrawl_scrape tool (documented in references/tool-reference.md) retrieves raw content from external URLs provided by the user or discovered during site mapping.
  • Boundary markers: Absent. The instructions in SKILL.md do not implement delimiters or 'ignore' instructions for the agent when handling content scraped from external sites.
  • Capability inventory: The agent has the capability to write synthesized profiles and raw data to the local file system in the competitor-profiles/ directory.
  • Sanitization: No sanitization, escaping, or validation of the retrieved web content is performed before the agent synthesizes the final markdown profiles in Phase 3.
  • [EXTERNAL_DOWNLOADS]: The skill fetches data from external services, specifically Firecrawl for web scraping and DataForSEO for market intelligence. These are well-known services utilized according to the skill's primary purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 07:02 PM