researcher
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: The agent is instructed to read web search results and full page content from external URLs as described in SKILL.md.
- Boundary markers: The instructions lack delimiters or explicit warnings to the agent to treat fetched content as data rather than instructions.
- Capability inventory: The skill uses web-search and page-reading tools to access external environments.
- Sanitization: There are no instructions for the agent to sanitize, filter, or validate the content retrieved from external sources before processing it.
Audit Metadata