gif-search

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches GIF metadata and downloads media files from the Tenor API (tenor.googleapis.com). These operations are standard for the skill's intended purpose of media retrieval.
  • [COMMAND_EXECUTION]: The skill utilizes curl and jq to perform network requests and parse JSON data. These are standard system utilities used for their intended functions.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external API (Tenor), which could theoretically contain malicious content designed to influence the agent. However, the data is parsed specifically for media URLs and metadata using jq, and the source is a reputable service provider, minimizing the risk.
  • Ingestion points: Tenor API search results (SKILL.md).
  • Boundary markers: None (standard shell pipes used).
  • Capability inventory: curl (network read/write), jq (data parsing).
  • Sanitization: Uses jq -r to extract specific string fields from the JSON response.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 06:26 PM