duplicate-content-review
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes several local Python scripts via the shell, including
scripts/dfs_client.py,scripts/site_crawler.py, andscripts/report_publish.py, to perform site crawling and generate client deliverables. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection because it fetches and processes untrusted content from external URLs to perform its analysis.
- Ingestion points: Web content and metadata retrieved from target domains via
webfetch(SKILL.md). - Boundary markers: The instructions do not specify any delimiters or safety markers to differentiate between the agent's instructions and the external data being analyzed.
- Capability inventory: The skill has the ability to execute shell commands for script processing and write report files to the local filesystem (SKILL.md).
- Sanitization: There is no mention of sanitizing or filtering the fetched web content before it is processed by the agent.
Audit Metadata