search-skill

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external community registries and aggregators (e.g., clawhub.ai, skillsmp.com). Maliciously crafted metadata or descriptions in third-party skills could potentially influence the agent's ranking or interpretation of results. * Ingestion points: WebFetch operations performed on external domains (skills.sh, clawhub.ai, skillsmp.com) to retrieve skill listings. * Boundary markers: No explicit delimiters are specified for the retrieved external text in the search logic. * Capability inventory: No dangerous system-level capabilities detected; the skill is limited to searching and formatting recommendations. * Sanitization: The skill proactively instructs the agent to perform security checks on search results, filtering out skills that request sensitive permissions or contain dynamic code execution patterns.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 03:21 AM