walmart-search
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill transmits user search queries and a sensitive authentication token (
FREVANA_TOKEN) to the external endpointhttps://ai-factory.frevana.com/service/walmart-search. - [COMMAND_EXECUTION]: The skill relies on the execution of
scripts/search_walmart.sh, which invokes shell commands includingcurlfor network operations andmkdir/cpfor file system manipulation. - [DYNAMIC_EXECUTION]: The script uses
python3 -to execute inline Python code for generating JSON request payloads and validating the integrity of API responses. - [INDIRECT_PROMPT_INJECTION]: The skill ingests search results from an external API, which may contain malicious instructions designed to influence the agent's subsequent behavior.
- Ingestion points: The script
scripts/search_walmart.shreads and returns data from the Frevana API endpoint. - Boundary markers: No specific delimiters or instructions to ignore embedded content were found in the skill definitions.
- Capability inventory: Includes network access via
curland the ability to write files to user-specified paths via the--outputparameter. - Sanitization: The skill performs JSON structural validation but does not sanitize or filter the content of the product listings before presenting them to the agent.
Audit Metadata