state-of-web2app-2026
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists entirely of instructional text and data tables. It contains no executable scripts, tool calls, or command execution patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and compare user-supplied metrics against its internal benchmarks. This constitutes an untrusted data ingestion surface. However, the risk is negligible as the skill lacks sensitive capabilities such as file system access, network operations, or dynamic code execution to exploit.
- [EXTERNAL_DOWNLOADS]: A reference URL to the original source report (funnelfox.com) is provided for context and attribution. No automated downloads or remote code execution patterns are associated with this reference.
Audit Metadata