Search Query Analyst
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external search query data which is an untrusted source.
- Ingestion points: The agent is instructed in
SKILL.mdto pull live search term reports directly from Google Ads APIs or web sources. - Boundary markers: The instructions do not define specific delimiters or "ignore" instructions for separating external data from the agent's core instructions.
- Capability inventory: The agent has access to
Bash,Write, andEdittools as indicated in theSKILL.mdfrontmatter, providing a potential impact path if an injection occurs. - Sanitization: There is no evidence of sanitization or escaping of the ingested query data described in the skill instructions.
Audit Metadata