quaternius-assets
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to
quaternius.comand potentially user-provided URLs to retrieve asset metadata usingurllib.request. While the primary purpose is legitimate asset discovery, theinspecttool can be directed to arbitrary URLs if the agent is manipulated. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and parses HTML content from external web pages, returning this data to the agent context.
- Ingestion points: Metadata extraction in
scripts/_quaternius.pyvia thesearchandinspectfunctions. - Boundary markers: None implemented; results are returned as raw dictionaries without delimiters or instruction-bypass warnings.
- Capability inventory: Network operations via
urllib.request.urlopen. - Sanitization: Employs
html.unescapeand regular expressions to strip tags from the fetched HTML.
Audit Metadata