google-reviews
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to execute a local JavaScript file
~/.agents/tools/fetch-google-reviews.jsusingnodeto fetch business data. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the DataForSEO API (business names, titles, categories, and addresses).
- Ingestion points: Data returned from the
business_data/google/my_business_info/liveendpoint is processed and returned to the agent context as JSON or Markdown tables. - Boundary markers: Absent. The instructions show raw JSON and Markdown table outputs without clear delimiters or warnings to the agent to ignore embedded instructions.
- Capability inventory: The skill performs command execution via
nodeand filesystem read operations for batch processing. - Sanitization: No sanitization or validation of the external API content is specified in the skill documentation.
Audit Metadata