web-search
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs the
ddgspackage from the Python Package Index (PyPI) if it is not already present on the system. - [COMMAND_EXECUTION]: The
scripts/search.pyscript usessubprocess.check_callto execute the system'spipcommand to install or update theddgslibrary. It also uses the--break-system-packagesflag to force installation on modern Linux environments. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external web search results which could contain malicious instructions.
- Ingestion points: Search results returned by the
DDGSlibrary inscripts/search.py. - Boundary markers: None identified; the results are processed as raw JSON and passed to the agent.
- Capability inventory: Subprocess execution for package management is present in
scripts/search.py. - Sanitization: No specific sanitization or filtering of the search result content is performed before presentation to the agent.
Audit Metadata