ollama-web
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it retrieves and processes untrusted data from the internet via search results and web page content.
- Ingestion points: API responses from
https://ollama.com/api/web_searchandhttps://ollama.com/api/web_fetch(defined in SKILL.md). - Boundary markers: Absent. The instructions do not require the agent to use delimiters or 'ignore' instructions found within the external content.
- Capability inventory: Execution of
curlcommands in the shell environment to interact with web APIs (defined in SKILL.md). - Sanitization: Absent. There are no instructions to sanitize or filter the content returned by the API before the agent processes it.
- [COMMAND_EXECUTION]: Uses shell commands, specifically
curl, to perform HTTP POST requests. This relies on the agent's underlying environment to safely handle shell interpolation of variables and user input. - [EXTERNAL_DOWNLOADS]: Interacts with official API endpoints at
https://ollama.comto fetch search results and webpage content as part of its primary functionality.
Audit Metadata