finding-healthcare-practices-via-google-search
Warn
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill includes a
customMapFunctionparameter that accepts a JavaScript function as a string. This enables the execution of arbitrary code to transform data objects at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external content from Google Search results, which can be manipulated by third parties.
- Ingestion points: Data is retrieved from Google Search snippets and titles via the
apidojo/google-search-scraperactor referenced inSKILL.md. - Boundary markers: There are no defined delimiters or instructions to signal the agent to ignore potentially malicious instructions embedded in the search results.
- Capability inventory: The skill includes logic to score and rank results based on the content of the retrieved snippets.
- Sanitization: There is no mention of sanitizing or escaping the text strings returned by the search engine before they are processed by the scoring logic.
- [COMMAND_EXECUTION]: The skill's documentation provides specific shell command examples using
nodeto execute local scripts (scripts/run_actor.js) andcurlto interact with the Apify REST API.
Audit Metadata