search
Pass
Audited by Gen Agent Trust Hub on May 2, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection because it instructs the agent to fetch and process content from external, untrusted websites.
- Ingestion points: The
WebFetchtool is used to ingest content from URLs found viaWebSearchas shown in the workflow section ofSKILL.md. - Boundary markers: Absent. The skill does not define specific delimiters or instructions to the model to ignore potential commands embedded within the fetched web data.
- Capability inventory: The skill utilizes
WebSearchandWebFetchto interact with external network resources. - Sanitization: Absent. There is no mechanism described to sanitize or filter the content retrieved from external sites before it is analyzed by the agent.
Audit Metadata