topic-demand-validation
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to api.crawlora.net to retrieve search suggestions, trends, and social media data. This domain is owned by the skill vendor and is used for its core functionality.
- [COMMAND_EXECUTION]: The skill executes scripts/crawlora.sh to perform API requests. The script implements strong security controls, including path and method whitelisting, environment variable validation, and protection against local file disclosure via curl.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from multiple external search and social media platforms, creating a potential vector for malicious instructions. 1. Ingestion points: Social media comments, transcripts, and search result snippets fetched via scripts/crawlora.sh from platforms including Reddit, TikTok, and YouTube. 2. Boundary markers: The instructions do not define specific delimiters or provide directions to the agent to ignore embedded instructions in the processed data. 3. Capability inventory: The skill has the capability to perform network operations and shell execution via the provided helper script. 4. Sanitization: No explicit sanitization or filtering of the external content is specified before the agent synthesizes the results.
Audit Metadata