domaindetails
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process content from an external website (domaindetails.com), which introduces a surface for indirect prompt injection attacks.
- Ingestion points: The tools
domaindetails_com__render_pageanddomaindetails_com__read_pagedefined inSKILL.mdare used to pull external data into the agent's context. - Boundary markers: The instructions do not specify the use of clear delimiters or instructions for the agent to treat the fetched content as data rather than instructions, which could lead the agent to follow hidden commands in the web content.
- Capability inventory: The skill utilizes network capabilities via the Unbrowse API to retrieve web content. While it doesn't have direct system access, the processed data influences the agent's responses.
- Sanitization: There is no explicit mention of sanitization or filtering of the HTML or text content retrieved from the external source before it is presented to the agent.
Audit Metadata