skills/acedatacloud/skills/discordbot/Gen Agent Trust Hub

discordbot

Pass

Audited by Gen Agent Trust Hub on Jun 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute curl and jq commands. These commands are used to interact with the official Discord REST API and parse JSON responses.
  • [DATA_EXPOSURE]: The skill relies on an environment variable named $DISCORDBOT_TOKEN to authenticate requests to Discord. This token is passed in the Authorization header. This is standard practice for managing API credentials in this environment.
  • [INDIRECT_PROMPT_INJECTION]: The skill provides functionality to read recent messages from Discord channels. Because this data originates from external users, it represents an indirect prompt injection surface where the agent might encounter and potentially follow instructions embedded in chat messages. The skill does not currently implement specific boundary markers or sanitization for this ingested content.
  • [EXTERNAL_DOWNLOADS]: The documentation references auth.acedata.cloud for token management. This domain is associated with the skill's author ('acedatacloud') and represents legitimate vendor infrastructure for credential configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 21, 2026, 01:09 PM
Security Audit — agent-trust-hub — discordbot