geo-audit-report
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to the official APIs of Bright Data (
api.brightdata.com) and DataForSEO (api.dataforseo.com) to collect audit data. These interactions are necessary for the skill's stated purpose and target well-known, established service providers.\n- [COMMAND_EXECUTION]: The included publishing script (publish-dashboard.mjs) executesnpm run buildusing the system's package manager. This is a standard procedure for building the Next.js-based dashboard template from the collected audit data.\n- [DYNAMIC_EXECUTION]: Thenormalize-brightdata-geo.pyutility script dynamically imports the core collector logic frombrightdata-geo.pyusing theimportlibmodule. This implementation is used for code reuse between local scripts and does not involve loading code from untrusted or remote locations.\n- [INDIRECT_PROMPT_INJECTION]: The dashboard renders data retrieved from external AI provider responses, which represents a surface for indirect prompt injection. The skill mitigates this risk by using thereact-markdownlibrary for structured rendering of third-party content and by implementing defensive normalization logic to handle malformed or unexpected provider payloads.
Audit Metadata