geo-audit-report

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill performs network requests to the official APIs of Bright Data (api.brightdata.com) and DataForSEO (api.dataforseo.com) to collect audit data. These interactions are necessary for the skill's stated purpose and target well-known, established service providers.\n- [COMMAND_EXECUTION]: The included publishing script (publish-dashboard.mjs) executes npm run build using the system's package manager. This is a standard procedure for building the Next.js-based dashboard template from the collected audit data.\n- [DYNAMIC_EXECUTION]: The normalize-brightdata-geo.py utility script dynamically imports the core collector logic from brightdata-geo.py using the importlib module. This implementation is used for code reuse between local scripts and does not involve loading code from untrusted or remote locations.\n- [INDIRECT_PROMPT_INJECTION]: The dashboard renders data retrieved from external AI provider responses, which represents a surface for indirect prompt injection. The skill mitigates this risk by using the react-markdown library for structured rendering of third-party content and by implementing defensive normalization logic to handle malformed or unexpected provider payloads.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 04:30 AM