siteos-search
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The synchronization runner script (
sync.mjs) uses the TypeScript compiler API to transpile and dynamically import local project configuration files and source handlers at runtime. This involves dynamic execution from computed paths but is a core requirement for the indexing functionality. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites during crawling and from local project files during source extraction. This establishes a surface for indirect prompt injection. The skill documentation specifically mitigates this by instructing the agent to treat such data as untrusted content rather than instructions. The capability inventory includes execution of CLI tools (@siteoshq/cli), project file modifications, and network requests to SiteOS infrastructure. Sanitization is performed via secret redaction and HTML escaping during report generation.
Audit Metadata