web-search-tor
Pass
Audited by Gen Agent Trust Hub on Aug 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Tor Expert Bundle from the official Tor Project infrastructure if no local binary is found. It includes a security check to verify the download against a published SHA256 hash.
- [COMMAND_EXECUTION]: Executes the
websearchCLI and starts thetorbinary as a detached process to manage network circuits. It uses shell commands for lifecycle management (up,status,down). - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Retrieves and processes data from external .onion services through search results and page fetches.
- Boundary markers: Implements an 'untrusted-content fence' around all external data to prevent the agent from interpreting content as instructions.
- Capability inventory: The skill uses the
websearchCLI tool to perform network requests and local file system operations in its state directory. - Sanitization: External content is rendered into clean Markdown to reduce the risk of processing malicious formatting or scripts.
Audit Metadata