ae-ltd-context7-radar
Pass
Audited by Gen Agent Trust Hub on Mar 26, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface due to its data ingestion capabilities.
- Ingestion points: The workflow involves reading dependency versions from local lockfiles and pulling documentation from external sources via the 'Context7' plugin as described in
SKILL.md. - Boundary markers: The instructions do not define clear delimiters or include warnings for the agent to ignore instructions embedded within the retrieved documentation.
- Capability inventory: The skill is configured to read local project files and interact with the 'Context7' tool for external data retrieval.
- Sanitization: No explicit sanitization or content validation steps are defined for the data retrieved from lockfiles or documentation sources.
Audit Metadata