customer-research
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the ingestion and analysis of untrusted data from multiple sources, creating an attack surface for indirect prompt injection.
- Ingestion points: Processes interview transcripts, survey results, support tickets, and online content from platforms like Reddit, G2, LinkedIn, and YouTube comments as described in SKILL.md and references/source-guides.md.
- Boundary markers: The instructions lack explicit delimiters or guidance for the agent to ignore instructions found within the research material.
- Capability inventory: The skill is instructional and does not define its own tools, but operates within an agent context that possesses various capabilities such as file system and web access.
- Sanitization: There are no instructions for sanitizing or escaping the data before it is processed by the agent.
- [NO_CODE]: The skill consists entirely of Markdown and JSON configuration files and does not contain any executable scripts or binary files.
Audit Metadata