searxng-search
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script
scripts/searchutilizes theuvxtool in its shebang to dynamically ensure thehttpxpackage is available at runtime. This is a standard and safe method for managing Python dependencies in standalone scripts. - [INDIRECT_PROMPT_INJECTION]: The skill inherently processes untrusted data retrieved from the web via search results, which is a potential surface for indirect prompt injection attacks.
- Ingestion points: The
searchfunction inscripts/searchfetches external data from a SearXNG instance (defaulting tolocalhostor a user-provided server). - Boundary markers: The skill does not implement explicit boundary markers or instructions to the agent to disregard embedded commands in the search results.
- Capability inventory: The skill is configured with
shellaccess allowed. - Sanitization: The script returns raw content snippets from search engines without sanitization or filtering for instructional patterns.
Audit Metadata