web-search

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automatically downloads and installs the ddgs package from the Python Package Index (PyPI) if it is not already present on the system.
  • [COMMAND_EXECUTION]: The scripts/search.py script uses subprocess.check_call to execute the system's pip command to install or update the ddgs library. It also uses the --break-system-packages flag to force installation on modern Linux environments.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external web search results which could contain malicious instructions.
  • Ingestion points: Search results returned by the DDGS library in scripts/search.py.
  • Boundary markers: None identified; the results are processed as raw JSON and passed to the agent.
  • Capability inventory: Subprocess execution for package management is present in scripts/search.py.
  • Sanitization: No specific sanitization or filtering of the search result content is performed before presentation to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 12:52 PM
Security Audit — agent-trust-hub — web-search