05-competitor-gap
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external market data and web search results, which creates a potential surface for indirect prompt injection if the ingested data contains malicious instructions.\n
- Ingestion points: Data is retrieved from Notion (market and ICP sizing data) and external websites via WebSearch.\n
- Boundary markers: The skill lacks explicit instructions or delimiters to tell the agent to ignore instructions embedded within the research data.\n
- Capability inventory: The skill has the ability to perform web searches and create/write pages in Notion.\n
- Sanitization: There are no defined procedures for sanitizing or filtering external content before it is processed and written to Notion.
Audit Metadata