danawa-price-search

Pass

Audited by Gen Agent Trust Hub on May 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to search.danawa.com and prod.danawa.com to retrieve product pricing, shipping details, and search listings. These operations are essential to the skill's primary function and target a well-known retail service.
  • [COMMAND_EXECUTION]: The skill utilizes a local Python script scripts/danawa_search.py to handle data extraction and parsing. The script uses standard libraries and the beautifulsoup4 package for processing HTML content.
  • [DATA_EXFILTRATION]: No evidence of sensitive data exposure or unauthorized network transmissions was found. Network activity is limited to the target domain for scraping purposes.
  • [PROMPT_INJECTION]: The instructions in SKILL.md focus solely on search logic and output formatting, with no attempts to override agent safety protocols or system prompts.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external web pages (Danawa). While it lacks explicit boundary markers for the scraped content, the processing logic is restricted to structured price data extraction, and the script's capabilities are limited to read-only network requests.
Audit Metadata
Risk Level
SAFE
Analyzed
May 13, 2026, 08:31 AM