verification-agent
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
node:child_process.execFileSyncto invoke thecurlbinary as a fallback transport mechanism for network requests. The implementation utilizes an argument array rather than a shell string, ensuring safe execution of the external binary.\n- [EXTERNAL_DOWNLOADS]: Fetches data from authoritative domains such asapi.quran.com,sunnah.com,openlibrary.org,api.crossref.org, andwikipedia.orgto retrieve religious and bibliographic text. It also downloads datasets from a GitHub repository (fawazahmed0/hadith-api) for content-indexed verification.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external APIs and HTML scraping, creating a surface for potential indirect prompt injection attacks.\n - Ingestion points: External content is fetched from academic and religious reference providers as defined in
scripts/lib/providers.mjsand processed inscripts/verify.mjs.\n - Boundary markers: The skill applies explicit normalisation profiles (e.g.,
arabic,latin,numeric) and match verdicts to validate retrieved text against expected values or independent corpora.\n - Capability inventory: The skill is capable of performing network fetches and writing verification records and human-readable summaries to the local filesystem.\n
- Sanitization: Logic in
scripts/lib/normalize.mjs(thestripTagsandcleanfunctions) handles HTML entities and performs tag stripping to clean external data before processing.
Audit Metadata