geo-citability
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and process untrusted content from external URLs, creating a surface for indirect prompt injection where instructions embedded in the analyzed pages could influence agent behavior.
- Ingestion points: The Analysis Procedure in SKILL.md specifies the use of the WebFetch tool to retrieve target URL content.
- Boundary markers: The instructions do not define specific delimiters or instructions for the agent to isolate or ignore embedded commands within the fetched content.
- Capability inventory: The agent has access to powerful tools including Bash and Write, which could be misused if the agent follows instructions found within the external data.
- Sanitization: No explicit sanitization or validation steps are provided for the external content before it is processed for scoring and rewrite suggestions.
Audit Metadata