anspire-web-search
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to
https://plugin.anspire.cn/api/ntsearch/searchusing theANSPIRE_API_KEYprovided in the environment. While this is the core functionality of the skill, it involves sending user-generated queries to an external service. - [COMMAND_EXECUTION]: The skill uses the
curlbinary to perform its network operations, as defined in theSKILL.mdinstructions and documented in the metadata requirements. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the web, creating a potential injection surface.
- Ingestion points: The agent is instructed to read JSON responses from the Anspire Search API and extract
title,url, andsnippetfields to summarize for the user. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following instructions that might be embedded within the search results (e.g., within a page snippet).
- Capability inventory: The skill has network access capabilities via
curlto fetch external content. - Sanitization: The instructions do not mention any validation, filtering, or escaping of the content retrieved from the search API before it is processed by the agent.
Audit Metadata