cwv-audit
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external monitoring tools while possessing broad capabilities, creating a potential attack surface. \n
- Ingestion points: The skill is instructed to pull real-time site data via Search Console and GA4 MCP tools, such as
mcp__cogny__search_console__tool_get_search_analyticsandmcp__cogny__google_analytics_4__tool_run_report(SKILL.md). \n - Boundary markers: The instructions lack explicit delimiters or warnings for the agent to disregard instructions potentially embedded within the data retrieved from external APIs. \n
- Capability inventory: The skill environment allows access to powerful tools including
Bash,Write,WebFetch, andWebSearch(SKILL.md). \n - Sanitization: There are no specific sanitization or validation routines defined for the data retrieved from external sources before it is processed or used by the agent.
Audit Metadata