searxng-search
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and process search results from the internet via a local SearXNG instance. This creates a surface where malicious content embedded in search results could attempt to influence the agent's behavior.
- Ingestion points: Search data is fetched from
http://localhost:8888/searchas described inSKILL.mdandreferences/agent-usage.md. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings for the agent when parsing search content.
- Capability inventory: The skill environment provides access to
curl,jq,podman,docker, anduvxfor further operations. - Sanitization: The provided scripts and examples (such as the Nushell helper and curl/jq patterns) do not include sanitization steps to filter or escape untrusted web content before it enters the agent's context.
- [EXTERNAL_DOWNLOADS]: The
scripts/start-searxngutility downloads the official SearXNG container image from the well-known Docker Hub registry (docker.io/searxng/searxng:latest). - [COMMAND_EXECUTION]: The skill executes local commands to manage containers (
podmanordocker) and suggests the use of theuvxtool to execute theqypipackage directly from the Python Package Index (PyPI) for package metadata searches.
Audit Metadata