google-search-api
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of
google-api-python-clientandlangchain-scavio. The former is an official package from a well-known provider, and the latter is a package specific to the skill's vendor. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data retrieved from the web via search results, which could potentially contain malicious instructions aimed at the agent.
- Ingestion points: Data is ingested via the
organic_results,ai_overview, andknowledge_graphfields from the API response atapi.scavio.dev. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore potential commands embedded within the search results.
- Capability inventory: The skill performs network operations to
api.scavio.devto retrieve search data. - Sanitization: There is no evidence of sanitization or filtering of the content returned from the external search provider before it is presented to the agent.
Audit Metadata