niche-data-finder
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references several well-known and official platforms for data discovery, such as SAM.gov, UK Companies House, and various professional association directories (e.g., RIBA, ACEC). These are established public services used for legitimate business research.
- [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves searching and browsing third-party websites to verify the existence and freshness of data (Step 2 and Step 4 in SKILL.md).
- Ingestion points: The agent ingests data from external URLs and search results during the verification phase.
- Boundary markers: The instructions do not specify any delimiters or safety warnings to ignore embedded instructions in the searched content.
- Capability inventory: The agent is expected to use browsing and search tools to interact with these sources.
- Sanitization: There is no mention of filtering or sanitizing the content retrieved from these external pages.
- [DYNAMIC_EXECUTION]: The extraction planning step (Step 6) mentions the use of scrapers, Apify actors, or generating 'short scripts' for data retrieval. While this is a common workflow for data researchers, it involves the conceptual generation of executable logic to handle external site structures.
Audit Metadata