venice-augment
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external, untrusted data from files, web URLs, and search results into the agent's context.
- Ingestion points: Untrusted data enters via file uploads in the
/augment/text-parserendpoint and third-party web content via the/augment/scrapeand/augment/searchendpoints. - Boundary markers: The documentation does not specify the use of delimiters or boundary instructions when passing extracted text to an LLM.
- Capability inventory: The skill enables network operations to the vendor's official API endpoints at
api.venice.aifor data processing. - Sanitization: While the API enforces query length limits and blocks certain sites (X, Reddit), it does not explicitly sanitize the text content of documents or web pages for embedded instructions.
Audit Metadata