google-patents-search
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns or vulnerabilities were found. The skill is designed for patent searching using standard tools.
- [COMMAND_EXECUTION]: The skill uses a local bash script to perform API requests. Parameters are handled through environment variables, preventing command injection vulnerabilities.
- [EXTERNAL_DOWNLOADS]: It fetches data from a legitimate domain (ai-factory.frevana.com) that matches the skill's purpose.
- [CREDENTIALS_UNSAFE]: Authentication is managed via environment variables (FREVANA_TOKEN) or CLI flags, which is a secure practice for managing API tokens. No hardcoded secrets were detected.
- [DATA_EXFILTRATION]: Search data is sent only to the intended API endpoint. No sensitive user files are accessed or transmitted.
- [PROMPT_INJECTION]: No instructions were found that attempt to override the agent's behavior or safety guidelines.
- [REMOTE_CODE_EXECUTION]: The skill does not download or execute scripts from remote sources.
- [DYNAMIC_EXECUTION]: The bash script uses Python heredocs to securely handle JSON processing without installing external dependencies.
Audit Metadata