flaresolverr-cli
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute a local Python script
scripts/flaresolverr-cli. This script acts as a wrapper for interacting with the FlareSolverr service's API. - [INDIRECT_PROMPT_INJECTION]: The skill serves as a gateway for fetching external web content, which introduces a potential surface for indirect prompt injection attacks if the fetched data contains malicious instructions meant to influence the agent.
- Ingestion points: External data enters the agent's context through the output of the
getandpostcommands inSKILL.md. - Boundary markers: The documentation does not describe the use of specific delimiters or markers to isolate external content from instructions.
- Capability inventory: The skill provides the ability to execute local scripts and perform network requests to the FlareSolverr service.
- Sanitization: There is no evidence of sanitization or validation of the content returned from external URLs before it is processed by the agent.
Audit Metadata