setup-chip
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and explain CHIP Collect API documentation. While this creates a theoretical surface for indirect injection if the source were compromised, the skill lacks high-risk capabilities like arbitrary command execution or network exfiltration of user data.
- Ingestion points: SKILL.md (references external documentation).
- Boundary markers: None specific to the external text.
- Capability inventory: No high-risk capabilities found in the skill body or provided references.
- Sanitization: None found for the documentation content.
- [EXTERNAL_DOWNLOADS]: The skill references official documentation and API endpoints for CHIP Collect (chip-in.asia). These are legitimate resources for the payment provider and align with the skill's stated purpose.
- [COMMAND_EXECUTION]: The documentation includes standard commands for managing secrets via the 'wrangler' CLI for Cloudflare deployments. These are appropriate instructions for the intended developer environment.
Audit Metadata