competitive-battlecard
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted data from external sources, including web search results and user-uploaded files such as sales notes and feature lists. This could allow malicious content within those sources to attempt to influence the agent's behavior.
- Ingestion points: Web search results (Step 1) and user-provided files (Context section).
- Boundary markers: The skill does not implement boundary markers or instructions to ignore embedded commands within the processed data.
- Capability inventory: The skill's functionality is limited to generating markdown text and does not include dangerous capabilities such as arbitrary command execution, network exfiltration, or modification of sensitive system files.
- Sanitization: No sanitization or validation is performed on the content retrieved from web searches or user files.
Audit Metadata