web-search
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the internet via web search results. This creates a surface for malicious instructions embedded in external content to influence the agent's behavior.
- Ingestion points: Web search results gathered during market research tasks (SKILL.md).
- Boundary markers: The skill does not explicitly define boundary markers (such as XML tags or delimiters) or specific instructions to disregard embedded commands in the fetched data.
- Capability inventory: The skill primarily utilizes web search and content summarization tools.
- Sanitization: No sanitization, filtering, or validation steps for the content of search results are documented.
- [NO_CODE]: The skill does not include any scripts, executables, or code files, which significantly reduces the risk of traditional malware or command execution vulnerabilities.
Audit Metadata