youdotcom-cli
Pass
Audited by Gen Agent Trust Hub on Mar 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs the
@youdotcom-oss/apipackage from the official npm or bun registries. These are vendor-owned resources provided by the skill author. - [COMMAND_EXECUTION]: The skill executes the
ydccommand-line tool andjqvia the Bash environment to perform searches and process JSON data. This is the primary intended functionality of the skill. - [PROMPT_INJECTION]: The skill proactively addresses indirect prompt injection risks by requiring the agent to wrap all external web content in
<external-content>delimiters and explicitly instructing the agent to ignore any commands or instructions found within those blocks. It also recommends usingjqto extract only necessary data fields, reducing the attack surface.
Audit Metadata