customer-research
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from various external sources, which presents a surface for indirect prompt injection attacks where malicious instructions could be embedded in research assets.
- Ingestion points: According to
SKILL.mdandreferences/source-guides.md, the skill processes external data from interview transcripts, survey results, support tickets, and online communities including Reddit, G2, Hacker News, and LinkedIn. - Boundary markers: The instructions do not specify the use of delimiters or "ignore embedded instructions" warnings when processing these external research assets.
- Capability inventory: The skill's workflow involves reading local context files (e.g.,
.agents/product-marketing.md) and using agent tools to fetch and extract content from diverse external URLs. - Sanitization: There are no instructions for sanitizing, escaping, or validating the text retrieved from external reviews or forum posts before it is synthesized into reports or personas.
Audit Metadata