competitive-ads-extractor
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from external sources such as Facebook Ad Library and LinkedIn. This creates a vulnerability to indirect prompt injection, where an attacker could place malicious instructions within ad copy to subvert the agent's analysis or behavior.
- Ingestion points: Untrusted ad text and metadata from Facebook, LinkedIn, and other external libraries as described in SKILL.md.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands are included in the prompt templates.
- Capability inventory: The skill utilizes file system write capabilities to save data to '~/competitor-ads/' and requires browser/scraping tools for data collection.
- Sanitization: No sanitization, validation, or escaping of the ingested external content is mentioned.
- [NO_CODE]: The skill is entirely composed of natural language instructions and examples. It does not include any executable code, shell scripts, or dependency configuration files.
Audit Metadata