technical-audit
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The audit methodology utilizes
curlto fetch the source code of a user-provided URL for analysis. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external websites, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The HTML content of the target website fetched during the audit process (SKILL.md).
- Boundary markers: The methodology does not define specific delimiters or instructions to ignore embedded commands within the fetched HTML.
- Capability inventory: The agent has the ability to write to the local filesystem (
page.html) and perform network operations. - Sanitization: No explicit sanitization or filtering of the external HTML content is mentioned before it is processed by the agent.
Audit Metadata