domain-analyzer
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external domain and SEO data, which establishes an ingestion surface for indirect prompt injection findings.
- Ingestion points: Data returned from strale_whois_lookup, strale_dns_lookup, strale_ssl_check, strale_domain_reputation, strale_tech_stack_detect, firecrawl_map, and dataforseo_v3_serp_google_organic_live_advanced.
- Boundary markers: Not present; the agent is not explicitly instructed to ignore instructions within tool outputs.
- Capability inventory: The skill only contains read-only research capabilities; it lacks access to the filesystem, shell, or sensitive credentials.
- Sanitization: Not specified in the current instructions.
Audit Metadata