geo-crawlers
Pass
Audited by Gen Agent Trust Hub on May 1, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is designed to ingest and parse untrusted data from external websites, creating a vulnerability to indirect prompt injection.
- Ingestion points: The skill fetches site data including robots.txt and HTML content via the WebFetch tool as detailed in the analysis procedure.
- Boundary markers: No delimiters or explicit safety instructions are provided to the agent to treat the fetched content as data rather than instructions.
- Capability inventory: The agent has access to Bash, WebFetch, and Write tools, which provide significant interaction capabilities with the environment.
- Sanitization: There is no defined process for sanitizing or validating the content of the external files before the agent analyzes and summarizes them.
Audit Metadata