phoneinfoga
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of untrusted data from external sources during phone number metadata investigation.
- Ingestion points: The output of the
phoneinfoga scancommand, which aggregates metadata and public search leads from various external web sources into the agent context. - Boundary markers: Absent; the instructions do not provide delimiters or warnings to the agent to disregard instructions potentially embedded in the retrieved search results.
- Capability inventory: The skill includes execution of the
phoneinfogabinary, which performs network operations to gather data. - Sanitization: Absent; the skill directs the agent to inspect the raw outcomes of the scanners without intermediate validation or sanitization.
- [EXTERNAL_DOWNLOADS]: The skill references the download and installation of external binaries and documentation from the PhoneInfoga project on GitHub. This is a legitimate reference to a well-known open-source security tool.
Audit Metadata