geo

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute several local Python scripts (brand_scanner.py, citability_scorer.py, fetch_page.py, generate_pdf_report.py, llmstxt_generator.py) to perform core logic, including brand scanning and PDF report generation.\n- [EXTERNAL_DOWNLOADS]: The skill fetches HTML content and metadata from user-provided URLs using the WebFetch tool and the requests library in its Python scripts.\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests untrusted content from the web for analysis. \n1. Ingestion points: The scripts fetch_page.py and citability_scorer.py fetch content from arbitrary URLs via the requests library. \n2. Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands in the fetched data. \n3. Capability inventory: The skill has the ability to execute shell commands (Bash), fetch web data (WebFetch), and write files (Write). \n4. Sanitization: Fetched HTML is parsed for text, but no specific prompt injection sanitization is performed on the content before it is provided to the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 03:26 AM
Security Audit — agent-trust-hub — geo