competitor-messaging-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external competitor websites provided via user arguments. This creates a surface for indirect prompt injection if those websites contain malicious prompts. However, the risk is minimal as the skill only performs text analysis and does not execute arbitrary code.\n
- Ingestion points: External competitor URLs provided in the arguments defined in
SKILL.md.\n - Boundary markers: No specific boundary markers are used to isolate untrusted web content from the agent's internal instructions.\n
- Capability inventory: Uses the
Readtool to fetch external content and theWritetool to save analysis results. No subprocess or system modification tools are used.\n - Sanitization: No explicit sanitization or filtering of web content is described.\n- [SAFE]: No other security concerns were identified. The skill does not use obfuscation, persistence mechanisms, or hardcoded credentials. All external references to
infloq.comare legitimate and consistent with the skill's documented vendor.
Audit Metadata