smart-search
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process data from a wide array of external, untrusted sources including social media platforms, news sites, and technical forums.
- Ingestion points: Data enters the agent's context through the output of
openclisearches targeting platforms like Twitter, Reddit, Weibo, and various news outlets (referenced acrossSKILL.mdand thereferences/directory). - Boundary markers: The instructions lack explicit boundary markers or "ignore embedded instructions" directives to mitigate the risk of the agent obeying malicious prompts found in search results.
- Capability inventory: The skill uses the
openclitool for searching and reading web content. The results are then processed to generate summaries or comparisons. - Sanitization: There is no defined process for sanitizing or validating the content retrieved from external websites before it is analyzed by the agent.
- [COMMAND_EXECUTION]: The skill's operation revolves around the dynamic execution of the
openclicommand. - The agent is instructed to run help commands (
-h) to discover parameters and then construct functional search commands based on user-supplied topics and goals, which involves interpolating user intent into the execution path of the CLI tool.
Audit Metadata