search-ad-keyword-architect
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [SAFE]: No malicious instructions, obfuscation, or unauthorized data access were found in the skill. The usage of the
APIFY_API_TOKENvia an environment variable is a secure implementation of credential management. - [COMMAND_EXECUTION]: The skill uses shell commands to invoke internal scripts belonging to its required sub-skills (e.g.,
skills/seo-domain-analyzer/scripts/analyze_domain.py). These executions are restricted to the local environment and represent standard orchestration behavior for a composite skill. - [PROMPT_INJECTION]: The skill is subject to an indirect prompt injection surface because it processes untrusted content from the web (Reddit, Hacker News, and third-party reviews).
- Ingestion points: Data enters the context through
analyze_domain.py,scrape_reviews.py,scrape_reddit.py,scrape_hn.py, andcatalog_site.py. - Boundary markers: The instructions do not utilize specific delimiters or warnings to isolate ingested data from the agent's core instructions.
- Capability inventory: The skill can perform web searches and execute local scripts, which could be influenced by malicious payloads in ingested data.
- Sanitization: There is no evidence of filtering or escaping logic applied to the external content before it is analyzed by the model.
Audit Metadata