customer-research
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides detailed instructions and extraction frameworks for customer research, focusing on Jobs-to-be-Done (JTBD), pain points, and triggers. No malicious intent or dangerous command execution was identified.
- [SAFE]: The agent is instructed to read local configuration files (e.g.,
product-marketing.md) for existing context, which is a benign and efficient practice for project-specific customization. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources such as online forums, review sites, and interview transcripts, which presents a surface for indirect prompt injection.
- Ingestion points: The skill explicitly processes data from external platforms including Reddit, G2, LinkedIn, and SparkToro, as well as local transcript files (
SKILL.md,references/source-guides.md). - Boundary markers: There are no explicit instructions for the agent to use XML-style delimiters or specific warnings to ignore instructions embedded within the research data.
- Capability inventory: The skill does not define or request any high-risk capabilities (no shell tools, no network write tools, and no code execution permissions).
- Sanitization: No validation or sanitization processes are defined for the data gathered from external sources.
Audit Metadata