skills/jackwener/opencli/smart-search/Gen Agent Trust Hub

smart-search

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process data from a wide array of external, untrusted sources including social media platforms, news sites, and technical forums.
  • Ingestion points: Data enters the agent's context through the output of opencli searches targeting platforms like Twitter, Reddit, Weibo, and various news outlets (referenced across SKILL.md and the references/ directory).
  • Boundary markers: The instructions lack explicit boundary markers or "ignore embedded instructions" directives to mitigate the risk of the agent obeying malicious prompts found in search results.
  • Capability inventory: The skill uses the opencli tool for searching and reading web content. The results are then processed to generate summaries or comparisons.
  • Sanitization: There is no defined process for sanitizing or validating the content retrieved from external websites before it is analyzed by the agent.
  • [COMMAND_EXECUTION]: The skill's operation revolves around the dynamic execution of the opencli command.
  • The agent is instructed to run help commands (-h) to discover parameters and then construct functional search commands based on user-supplied topics and goals, which involves interpolating user intent into the execution path of the CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 12:30 AM
Security Audit — agent-trust-hub — smart-search