market-research-reports
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data via the
research-lookuptool to populate report sections. While it lacks explicit boundary markers or sanitization for this external content, the risk is mitigated by the structured LaTeX template format. - Ingestion points:
research-lookupresults gathered in Phase 1 and integrated into LaTeX drafts. - Boundary markers: Absent; data is interpolated directly into the
.texfiles. - Capability inventory:
Read,Write,Edit, andBashtools are used to manage files and compile the LaTeX document into PDF format usingxelatex. - Sanitization: No specific sanitization of external market data is mentioned before inclusion in reports.
- [COMMAND_EXECUTION]: The skill uses
Bashto execute LaTeX compilation commands (xelatex,bibtex) and to run local Python scripts for visual generation. Thescripts/generate_market_visuals.pyscript usessubprocess.runto call internal tools (scientific-schematics,generate-image) with arguments derived from the report topic. These operations are essential for the skill's primary purpose and do not represent unauthorized command execution.
Audit Metadata