competitor-tracker
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection because it is designed to ingest and process content from untrusted external sources like competitor websites and social media.
- Ingestion points: Data gathered from external sources including official blogs, press releases, social media, and industry forums (SKILL.md, Step 2).
- Boundary markers: Absent. There are no explicit instructions for the agent to use delimiters or ignore instructions found within the retrieved data.
- Capability inventory: The skill has the capability to write files to the local file system (SKILL.md, Output Format).
- Sanitization: Absent. The instructions do not define specific mechanisms for filtering or escaping content retrieved during the intelligence gathering phase.
Audit Metadata