web-search
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to configure the You.com MCP server using the endpoint
https://api.you.com/mcp. This is a well-known search service and is used here for its intended purpose of providing web search capabilities. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from web search results, which is an inherent risk for search-based functionality.
- Ingestion points: External content is retrieved via the
you-searchtool or theWebSearchtool and processed as described inSKILL.md. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are explicitly defined in the documentation for handling the retrieved content.
- Capability inventory: The skill's functionality is limited to ranking findings and returning data objects; it does not involve file system writes, arbitrary command execution, or other high-risk operations based on the search data.
- Sanitization: The documentation does not specify explicit sanitization or filtering steps for the content retrieved from external web pages.
Audit Metadata