discover-api
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the official
bdataCLI andcurlto interact with the Bright Data Discover API. These commands are documented for their intended use in search and retrieval workflows. - [DATA_EXFILTRATION]: Network communication is directed to
api.brightdata.com, which is the authoritative domain for the vendor's API. No unauthorized data transmission was detected. - [PROMPT_INJECTION]: The skill retrieves untrusted third-party data from the web (page content, titles, and descriptions), creating an indirect prompt injection surface.
- Ingestion points: The
results[].content,results[].title, andresults[].descriptionfields (SKILL.md) ingest external content. - Boundary markers: No explicit delimiters or instruction-override warnings are provided for the agent when processing these fields.
- Capability inventory: The skill has access to the shell via
curland thebdataCLI (SKILL.md). - Sanitization: The documentation suggests filtering for block-page and CAPTCHA signatures, but does not include specific sanitization for malicious instructions.
Audit Metadata