form-web
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to its data ingestion and tool capabilities.
- Ingestion points: The skill uses
WebFetchandWebSearchtools during Phase 1 (Discovery) to identify and analyze competitor websites and visual benchmarks (SKILL.md). - Boundary markers: There are no specific instructions or delimiters (such as XML tags) to isolate fetched web content or warn the agent against executing instructions found within that data.
- Capability inventory: The skill is configured with powerful tools including
Bash,Write,Edit, andTask(SKILL.md). - Sanitization: No sanitization, filtering, or validation steps are defined for content retrieved from external URLs before it is processed by the agent.
Audit Metadata