fastaf-web-data
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch content from external web pages and search engines, which represents a surface for indirect prompt injection where malicious instructions could be embedded in the scraped data.
- Ingestion points: Tools described in
SKILL.mdsuch asscrape_page,search_web, andsearch_amazonallow the ingestion of arbitrary web data. - Boundary markers: The skill does not provide specific instructions for using delimiters or protective prompts when the agent processes the fetched content.
- Capability inventory: The skill facilitates network operations to the
api.fastaf.codomain to retrieve web data. - Sanitization: No explicit sanitization, filtering, or validation of the retrieved external content is described.
- [EXTERNAL_DOWNLOADS]: The documentation references the
@x402/fetchNode.js package as an example client for implementing the x402 payment protocol.
Audit Metadata