ideal-postcodes-address-finder
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of user-provided address queries to populate form fields. This creates a surface for indirect prompt injection where malicious input in the search field could attempt to influence the agent's processing logic.
- Ingestion points: Primary address search input field defined via
inputFieldoroutputFields.line_1(referenced inSKILL.md,references/configure.md, etc.). - Boundary markers: No specific delimiters or boundary markers are instructed for the search input content.
- Capability inventory: The skill manages DOM manipulation to write to form inputs (
outputFields) and executes logic via callbacks likeonAddressRetrieved(references/callbacks.md). - Sanitization: Sanitization is handled internally by the
@ideal-postcodes/address-finderlibrary. - [EXTERNAL_DOWNLOADS]: The documentation instructs users to install packages such as
@ideal-postcodes/address-finderand@ideal-postcodes/reactfrom npm, or to include scripts from jsdelivr. These are verified vendor resources hosted on reputable services.
Audit Metadata