geo-citability
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted content from external URLs.
- Ingestion points: The skill uses
WebFetchin Step 1 of its analysis procedure to retrieve content from a target URL provided by the user. - Boundary markers: The instructions do not define clear delimiters or provide explicit guidelines for the agent to treat the fetched content as inert data, which may lead the agent to follow instructions embedded in the webpage.
- Capability inventory: The skill's execution environment includes powerful tools such as
Bash,Write, andWebFetch, creating a potential impact if the agent is manipulated by external content. - Sanitization: The procedure lacks specific steps for sanitizing, escaping, or filtering the fetched content before analysis and summary generation.
Audit Metadata