you-free
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the official You.com MCP server endpoint (api.you.com) to provide search capabilities. This is a standard reference to the vendor's infrastructure for the stated purpose of the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data via web search results. It includes explicit safety instructions for the agent to treat these results as evidence rather than instructions and to cite sources, which follows best practices for mitigating indirect prompt injection from search snippets.
Audit Metadata