geo-content
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exposes an indirect prompt injection surface by design as its core functionality involves retrieving and processing content from external URLs.
- Ingestion points: The skill instructions specify using the
WebFetchtool to retrieve target pages for analysis as outlined in the 'How to Use This Skill' section. - Boundary markers: The instructions do not provide explicit guidance for the agent to use boundary markers or delimiters when handling the fetched content to prevent the execution of embedded instructions.
- Capability inventory: The agent is granted access to
Read,Grep,Glob,Bash,WebFetch, andWritetools to perform analysis and generate report files. - Sanitization: The evaluation workflow lacks specific steps for the sanitization, validation, or filtering of the content retrieved from external sources before it is interpreted by the agent.
Audit Metadata