competitor-profiling
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by ingesting and processing untrusted data from arbitrary external competitor websites.
- Ingestion points: The
firecrawl_scrapetool (documented inreferences/tool-reference.md) retrieves raw content from external URLs provided by the user or discovered during site mapping. - Boundary markers: Absent. The instructions in
SKILL.mddo not implement delimiters or 'ignore' instructions for the agent when handling content scraped from external sites. - Capability inventory: The agent has the capability to write synthesized profiles and raw data to the local file system in the
competitor-profiles/directory. - Sanitization: No sanitization, escaping, or validation of the retrieved web content is performed before the agent synthesizes the final markdown profiles in Phase 3.
- [EXTERNAL_DOWNLOADS]: The skill fetches data from external services, specifically Firecrawl for web scraping and DataForSEO for market intelligence. These are well-known services utilized according to the skill's primary purpose.
Audit Metadata