competitive-cartographer
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The file
scripts/validate_map.shis a shell script that performs structural validation on JSON data using thejqutility. - [PROMPT_INJECTION]: An analysis of the indirect prompt injection surface (Category 8) was performed for the research functionality.
- Ingestion points: Competitive data fetched via
WebSearchandWebFetchas defined inSKILL.md. - Boundary markers: Not present.
- Capability inventory: Filesystem
Writeaccess and execution of thevalidate_map.shscript. - Sanitization: Not present.
- [SAFE]: No critical or high-severity threats such as hardcoded credentials, malicious obfuscation, or unauthorized data exfiltration were detected.
Audit Metadata