quran-search
Pass
Audited by Gen Agent Trust Hub on Jul 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security findings were identified. The skill performs legitimate data retrieval from a specialized religious API.
- [EXTERNAL_DOWNLOADS]: Fetches Quranic data from the official AlQuran Cloud API (api.alquran.cloud). These operations are read-only and use standard API endpoints for religious text retrieval.
- [COMMAND_EXECUTION]: Employs curl and jq to interact with the API and parse the results. The commands are structured and do not involve executing untrusted scripts or arbitrary shell commands.
- [PROMPT_INJECTION]: Assessed for indirect prompt injection via API responses. 1. Ingestion points: Data enters the agent context from api.alquran.cloud via curl. 2. Capability inventory: The skill uses curl and jq for data display; no file-write or subprocess execution on the fetched data is present. 3. Boundary markers: No specific delimiters or 'ignore' instructions are used for API output. 4. Sanitization: Content is not explicitly sanitized, but the usage context (displaying verses) and reputable source minimize risk. The risk is considered negligible given the specific context of Quranic verse retrieval.
Audit Metadata