genre-shortlist
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches curated movie lists in Markdown format and query results via JSON from goodrecmovies.com. These network operations are necessary for the skill's stated purpose of providing recommendations.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content fetched from external URLs, which creates a potential surface for indirect instructions to be ingested.
- Ingestion points: Fetches Markdown files from https://goodrecmovies.com/best/*.md and API responses from https://goodrecmovies.com/ask.
- Boundary markers: None defined to separate external data from agent instructions.
- Capability inventory: Uses the search_titles MCP tool to interact with title databases.
- Sanitization: No explicit validation or filtering of the external content is implemented.
Audit Metadata