customer-research
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process raw, untrusted data from external sources as its primary function. \n
- Ingestion points: Instructions in
SKILL.md(Mode 2) andreferences/source-guides.mddirect the agent to gather intelligence from platforms like Reddit, G2, Hacker News, and LinkedIn. \n - Boundary markers: The skill lacks explicit instructions for the agent to use boundary markers or to ignore embedded instructions within the research material. \n
- Capability inventory: The agent uses the collected data to synthesize reports, build customer personas, and generate 'voice of customer' banks. These outputs are intended to drive subsequent actions in linked skills like copywriting or conversion rate optimization (CRO). \n
- Sanitization: There are no mentions of validation, sanitization, or filtering of the content retrieved from external watering holes before it is integrated into the agent's context.
Audit Metadata