search-ad-keyword-architect

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: No malicious instructions, obfuscation, or unauthorized data access were found in the skill. The usage of the APIFY_API_TOKEN via an environment variable is a secure implementation of credential management.
  • [COMMAND_EXECUTION]: The skill uses shell commands to invoke internal scripts belonging to its required sub-skills (e.g., skills/seo-domain-analyzer/scripts/analyze_domain.py). These executions are restricted to the local environment and represent standard orchestration behavior for a composite skill.
  • [PROMPT_INJECTION]: The skill is subject to an indirect prompt injection surface because it processes untrusted content from the web (Reddit, Hacker News, and third-party reviews).
  • Ingestion points: Data enters the context through analyze_domain.py, scrape_reviews.py, scrape_reddit.py, scrape_hn.py, and catalog_site.py.
  • Boundary markers: The instructions do not utilize specific delimiters or warnings to isolate ingested data from the agent's core instructions.
  • Capability inventory: The skill can perform web searches and execute local scripts, which could be influenced by malicious payloads in ingested data.
  • Sanitization: There is no evidence of filtering or escaping logic applied to the external content before it is analyzed by the model.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 06:25 PM
Security Audit — agent-trust-hub — search-ad-keyword-architect