geo-technical

Pass

Audited by Gen Agent Trust Hub on Feb 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions direct the agent to utilize the curl command-line utility to retrieve website data and measure server performance (TTFB). This involves executing shell commands where user-provided URLs are used as arguments.
  • [PROMPT_INJECTION]: This skill has a surface for indirect prompt injection as its core function is to ingest and analyze data from untrusted external websites.
  • Ingestion points: The skill ingests data from external URLs, robots.txt, XML sitemaps, and raw HTML content.
  • Boundary markers: There are no specified delimiters or instructions provided to isolate external content or tell the agent to ignore embedded commands.
  • Capability inventory: The skill leverages curl for network requests and data retrieval.
  • Sanitization: The instructions do not describe any sanitization or validation of the fetched external content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 27, 2026, 01:01 PM