octen-image-search
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill interacts with a legitimate vendor service at
https://api.octen.ai. The use ofcurlfor API requests is functional and transparently documented. - [COMMAND_EXECUTION]: The skill uses
curlas its primary method for fetching data from the external search service. - [INDIRECT_PROMPT_INJECTION]: As an image search tool, the skill ingests data from the web which could potentially contain malicious instructions.
- Ingestion points: External metadata retrieved from search results, including
description,title, andhtml_snippetfields inSKILL.md. - Boundary markers: None defined to isolate external search result data from the agent's instructions.
- Capability inventory: Network access via
curlto theocten.aidomain. - Sanitization: No explicit content sanitization or validation of the search metadata is described in the instruction set.
Audit Metadata