readthedocs-search-api

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill performs network operations targeting official vendor domains, specifically app.readthedocs.org and app.readthedocs.com, to retrieve documentation data.
  • [SAFE]: The provided Python code examples utilize the standard requests library for HTTP communication, which is appropriate for the skill's stated purpose.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data retrieved from a public search API.
  • Ingestion points: Data enters the context through the /api/v3/search/ endpoint as described in SKILL.md.
  • Boundary markers: No specific delimiters or "ignore instructions" warnings are present in the provided examples.
  • Capability inventory: Across the provided instructions and scripts, capabilities are limited to network reads and console output; no file system writes, subprocess executions, or dynamic code evaluation (eval/exec) are present.
  • Sanitization: The examples do not implement specific sanitization or filtering of the retrieved documentation snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 06:30 PM