skills/veniceai/skills/venice-augment/Gen Agent Trust Hub

venice-augment

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external, untrusted data from files, web URLs, and search results into the agent's context.
  • Ingestion points: Untrusted data enters via file uploads in the /augment/text-parser endpoint and third-party web content via the /augment/scrape and /augment/search endpoints.
  • Boundary markers: The documentation does not specify the use of delimiters or boundary instructions when passing extracted text to an LLM.
  • Capability inventory: The skill enables network operations to the vendor's official API endpoints at api.venice.ai for data processing.
  • Sanitization: While the API enforces query length limits and blocks certain sites (X, Reddit), it does not explicitly sanitize the text content of documents or web pages for embedded instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 09:34 PM
Security Audit — agent-trust-hub — venice-augment