brand-protection
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow for analyzing external, attacker-controlled data, which presents a surface for indirect prompt injection attacks.
- Ingestion points: The agent is instructed to ingest data from external URLs, WHOIS records, and hosting information (referenced in SKILL.md).
- Boundary markers: The instructions lack explicit delimiters or warnings to treat processed external content as untrusted data.
- Capability inventory: While the skill itself is purely informational markdown, it directs the agent's core capabilities (file reading, web browsing) toward potentially malicious content.
- Sanitization: There are no instructions for sanitizing or escaping the data retrieved from external sources before further processing.
Audit Metadata