alterlab-trdizin
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external search results from the TR Dizin API, which represents a potential surface for indirect prompt injection.
- Ingestion points: The
scripts/query_trdizin.pyscript retrieves publication and journal records from the search.trdizin.gov.tr endpoint. - Boundary markers: Not explicitly defined; the agent processes the direct output of the query script.
- Capability inventory: The skill is permitted to execute a local Python query script via the Bash tool; it has no access to sensitive credentials, private local files, or unauthorized network destinations.
- Sanitization: The Python script parses raw API responses and extracts only necessary fields (such as ISSN, title, and year), effectively filtering the external content before it is processed by the agent.
Audit Metadata