freehire-search
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests job descriptions from the external freehire.me API. These descriptions are processed by the agent and could contain hidden instructions designed to influence or override the agent's behavior.
- Ingestion points: API response data in cli/src/commands/search.ts and cli/src/commands/detail.ts.
- Boundary markers: No specific boundary markers or 'ignore instructions' directives are placed around the ingested content.
- Capability inventory: The skill is limited to performing network GET requests and writing data to standard output.
- Sanitization: The cleanHtml utility in cli/src/helpers.ts sanitizes content by stripping HTML tags and decoding entities.
Audit Metadata