searxng
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the web, creating a potential attack surface for indirect prompt injection.
- Ingestion points: The skill fetches search results via
searxng_web_searchand content from arbitrary URLs viaweb_url_read(SKILL.md). - Boundary markers: Absent. The skill instructions do not specify using delimiters or warnings when processing the ingested content.
- Capability inventory: The skill enables reading from the network via tools.
- Sanitization: Absent. The skill does not mention filtering or sanitizing the retrieved web content.
Audit Metadata