ads-dna
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the WebFetch tool to retrieve content from external URLs provided by the user (Homepage, About, and Product pages) for analysis.
- [PROMPT_INJECTION]: The processing of external website content presents a surface for indirect prompt injection.
- Ingestion points: External URLs fetched via the WebFetch tool as specified in the SKILL.md file.
- Boundary markers: The fetch prompts do not include explicit delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill has the capability to write a local JSON file to the filesystem.
- Sanitization: The extraction logic relies on specific CSS attributes and scoring heuristics, which limits the risk of the agent following arbitrary instructions embedded in the source text.
Audit Metadata