geo-optimizer

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [PROMPT_INJECTION]: The skill processes content from arbitrary external URLs, creating a surface for indirect prompt injection.
  • Ingestion points: scripts/audit-geo.py and scripts/check-hedge-density.py fetch content from target URLs.
  • Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore embedded commands in the fetched data.
  • Capability inventory: The skill has network access and the ability to execute subprocesses.
  • Sanitization: BeautifulSoup is used to remove HTML structural tags like scripts and styles, but the extracted text content is not sanitized for potential natural language instructions.
  • [EXTERNAL_DOWNLOADS]: The scripts automatically install the standard Python libraries requests and beautifulsoup4 from the official Python Package Index (PyPI) if they are missing from the environment.
  • [COMMAND_EXECUTION]: The skill uses subprocess.check_call to manage its own dependency installation via the pip package manager.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 11:33 PM