geo-query-finder

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: Provides a curl command template used to retrieve LLM mention data from the DataForSEO API.
  • [EXTERNAL_DOWNLOADS]: Communicates with api.dataforseo.com and api.openai.com to fetch search data and AI model responses; these are well-known services for SEO analytics and artificial intelligence.
  • [CREDENTIALS_UNSAFE]: Correctly references environment variables (DATAFORSEO_LOGIN, DATAFORSEO_PASSWORD, and OPENAI_API_KEY) for API authentication instead of using hardcoded secrets.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external API responses and search results. Ingestion points: DataForSEO API and OpenAI Search API results. Boundary markers: None explicitly defined. Capability inventory: Uses curl and Python urllib for network operations with no high-privilege file-system or shell execution based on retrieved data. Sanitization: None implemented. The risk is considered low as the data is used for structured reporting rather than autonomous decision-making.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 09:00 PM
Security Audit — agent-trust-hub — geo-query-finder