negotiate
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill represents a potential surface for indirect prompt injection because it ingests and processes information from external websites while possessing significant system capabilities. \n
- Ingestion points: Data is gathered from external sources using
WebSearchandWebFetchtools. \n - Boundary markers: The skill does not define specific delimiters or instructions to prevent the agent from inadvertently following commands that might be embedded in the fetched web content. \n
- Capability inventory: The agent has the ability to read and write local files (such as
offers.yaml) and has access to theBashshell tool. \n - Sanitization: There is no mechanism described to sanitize or validate the external content before it is processed by the agent.
Audit Metadata