unopim-search
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages search indexing and filtering for product data, creating a surface for indirect prompt injection where data in the catalog could influence agent behavior.
- Ingestion points:
indexing.mddescribes the indexing process where product attributes, values, and localized content are fetched from the database or importer and stored in Elasticsearch. - Boundary markers: The skill does not define specific delimiters or instructions to the agent to treat search results or document payloads as untrusted content.
- Capability inventory: The skill requires
unopim-execfor Artisan command execution and uses theElasticSearchfacade for network-based queries and configuration updates. - Sanitization: The instructions include type coercion (e.g.,
filter_varfor booleans) and normalization (sanitizeProductArray,ProductNormalizer) to ensure data matches expected mappings. - [COMMAND_EXECUTION]: The skill provides instructions for executing management commands that interact with the search infrastructure.
- Evidence:
indexing.mddetails the use ofunopim:product:index,unopim:category:index, andunopim:elastic:clear. These commands are wrapped inunopim-execand are used for routine maintenance tasks such as reindexing or clearing search indices.
Audit Metadata