skills/beclab/olares/olares-search/Gen Agent Trust Hub

olares-search

Pass

Audited by Gen Agent Trust Hub on Aug 22, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the olares-cli binary to perform global searches over local Drive files, Seafile/Sync libraries, and cloud integrations (Google Drive, Dropbox).
  • [PROMPT_INJECTION]: The skill has a potential attack surface for indirect prompt injection as it ingests untrusted file content during full-text searches.
  • Ingestion points: Full-text content retrieved from Drive, Sync, Google Drive, and Dropbox via olares-cli search.
  • Boundary markers: None explicitly defined in the skill instructions; it relies on the agent's interpretation of JSON/CLI output.
  • Capability inventory: The skill itself is restricted to read-only search subcommands, though it references external skills for file management and settings.
  • Sanitization: No specific sanitization or filtering of search results is defined within the skill text.
  • [SAFE]: The skill follows least-privilege principles by maintaining a read-only state for search operations and requiring explicit user confirmation or delegation to olares-settings for index mutations (add, remove, rebuild).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 22, 2026, 02:09 PM
Security Audit — agent-trust-hub — olares-search