jobdanmark-search
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external job postings, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: External job descriptions are fetched and parsed from
jobdanmark.dkvia thedetailcommand incli/src/commands/detail.ts. - Boundary markers: The CLI output provides structured data in JSON, table, or plain text formats, but lacks explicit boundary markers to encapsulate external content for the agent.
- Capability inventory: The skill allows the agent to search for jobs, fetch specific details, and resolve locations or categories using the provided CLI tool.
- Sanitization: The tool performs basic HTML stripping and text cleaning in
cli/src/helpers.tsandcli/src/commands/detail.ts, but does not filter or sanitize for natural language instructions embedded within job descriptions.
Audit Metadata