search-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from user messages and search results, which represents a standard indirect injection surface.
- Ingestion points: The agent ingests data from user messages, profile information, and results from
web_searchandget_product_details(SKILL.md). - Boundary markers: No specific delimiters or instructions to ignore embedded instructions are defined in the skill body.
- Capability inventory: The skill uses
present_products,present_comparison,get_product_details, andweb_searchtools, which are scoped to information display and retrieval and lack high-privilege operations. - Sanitization: No explicit sanitization or validation of external content is mentioned.
Audit Metadata