url-structure-review
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes local Python scripts to perform analysis and generate reports.
- Evidence: The skill calls
python scripts/dfs_client.pyto fetch ranking data andpython scripts/report_publish.pyto generate client deliverables. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from untrusted external sources, which could contain malicious instructions designed to influence the agent's behavior.
- Ingestion points: The skill fetches live page content via the
webfetchtool and sitemap data from external domains. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from interpreting instructions that may be embedded within the fetched HTML or sitemaps.
- Capability inventory: The agent is authorized to execute local Python scripts and perform network operations to retrieve content.
- Sanitization: There is no visible sanitization or validation of the content retrieved from external URLs before it is processed by the agent.
Audit Metadata