account-research
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from various external and untrusted sources, creating a surface for indirect prompt injection attacks.
- Ingestion points: Information is gathered from web searches (including company websites, news articles, LinkedIn profiles, and job postings), enrichment tool APIs, and CRM databases (SKILL.md).
- Boundary markers: The instructions lack specific delimiters or guardrails to prevent the agent from executing instructions that might be embedded in the retrieved web content.
- Capability inventory: The skill uses web search, CRM read access, and enrichment API access to collect and synthesize information.
- Sanitization: There are no documented steps for the agent to sanitize, filter, or validate the content retrieved from external sources before presenting it to the user or using it for further reasoning.
Audit Metadata