Ask-Samin
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill configures a remote Model Context Protocol (MCP) server located at
https://ask-samin-ochre.vercel.app/mcp. This server is hosted on Vercel and is owned by the skill vendor, ai-answer, as part of the intended functionality for knowledge retrieval. - [COMMAND_EXECUTION]: Instructions in
SKILL.mdandREADME.mdprovide shell commands (e.g.,claude mcp add) for the agent or user to execute. These commands are used to register the remote MCP tools within the agent's environment. - [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface for indirect prompt injection because it fetches external content from the Claude Club platform via
searchandfetchtools and interpolates that data into the prompt. - Ingestion points: Data retrieved via the
search,fetch, andbrowse_curriculumtools defined inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the retrieved text.
- Capability inventory: The skill utilizes search tools and environment configuration commands.
- Sanitization: There is no evidence of content sanitization or validation for the data returned by the remote MCP tools.
Audit Metadata