answer-engine-content-audit
Pass
Audited by Gen Agent Trust Hub on Jul 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes common command-line tools including
curl,grep,sed, andpython3inreferences/checks.md. These are used to extract headers, metadata, and body text from website HTML for auditing purposes. - [EXTERNAL_DOWNLOADS]: The skill performs network requests using
curlto fetch content from target URLs and site maps. This is the primary function of the audit workflow and is directed at user-specified sites. - [PROMPT_INJECTION]: An indirect prompt injection surface is present because the skill ingests and processes untrusted data from external websites. 1. Ingestion points: Page content and sitemaps fetched via
curlinreferences/checks.md. 2. Boundary markers: Absent; the skill does not include specific delimiters or instructions to the agent to ignore embedded commands in the fetched data. 3. Capability inventory: Access to shell commands (curl,grep,sed) and static Python script execution withinreferences/checks.md. 4. Sanitization: Absent; the skill relies on simple text extraction and filtering to present data to the agent.
Audit Metadata