gif-search
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches GIF metadata and downloads media files from the Tenor API (tenor.googleapis.com). These operations are standard for the skill's intended purpose of media retrieval.
- [COMMAND_EXECUTION]: The skill utilizes
curlandjqto perform network requests and parse JSON data. These are standard system utilities used for their intended functions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external API (Tenor), which could theoretically contain malicious content designed to influence the agent. However, the data is parsed specifically for media URLs and metadata using
jq, and the source is a reputable service provider, minimizing the risk. - Ingestion points: Tenor API search results (SKILL.md).
- Boundary markers: None (standard shell pipes used).
- Capability inventory:
curl(network read/write),jq(data parsing). - Sanitization: Uses
jq -rto extract specific string fields from the JSON response.
Audit Metadata