optise-helix-eu-trust-centre
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFEPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection findings based on its operational design.
- Ingestion points: In Step 4, the skill accepts and fetches content from a user-provided URL to perform a 'Trust Centre audit'.
- Boundary markers: The skill does not define specific delimiters or instructions to the agent to ignore embedded commands within the fetched URL content.
- Capability inventory: The skill uses
web_fetchandweb_searchand can pass data to other skills likeoptise-helix-fitq-audit. - Sanitization: No explicit sanitization or filtering logic is provided for content retrieved from external sources.
- [DATA_EXFILTRATION]: The skill uses
web_fetchandweb_searchto access arbitrary external domains, which is a standard functional requirement for verifying facts and auditing pages but technically allows network requests to non-whitelisted destinations.
Audit Metadata