google-trends
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/search_google_trends.shusescurlto make POST requests tohttps://ai-factory.frevana.com/service/google-trendsto retrieve search trend data based on user keywords. - [COMMAND_EXECUTION]: The skill requires the agent to execute a local Bash script (
scripts/search_google_trends.sh) which in turn invokescurlandpython3to process data and interact with the network. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from an external API and provides it to the agent for summarization, creating a vulnerability surface.
- Ingestion points: The
scripts/search_google_trends.shscript fetches JSON data from theai-factory.frevana.comendpoint. - Boundary markers: Absent. Neither the skill instructions nor the script provide delimiters or instructions for the agent to ignore potentially malicious content embedded in the API response.
- Capability inventory: The skill can execute shell scripts, make network requests via
curl, and write data to arbitrary local file paths via the--outputparameter. - Sanitization: The script validates that the API response is valid JSON, but it does not perform any sanitization or filtering of the text content within that JSON.
Audit Metadata