gitea-api
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
curlutility to perform various API operations, including creating issues, listing pull requests, and managing API tokens (SKILL.md). - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external Gitea repositories, which presents a surface for indirect prompt injection attacks where malicious data influences agent behavior.
- Ingestion points: The skill reads external content from endpoints such as
/repos/{owner}/{repo}/issuesand/repos/{owner}/{repo}/pulls(SKILL.md). - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are present when processing API responses.
- Capability inventory: Includes network operations (
curl) for data retrieval and modification (SKILL.md). - Sanitization: No sanitization or validation logic is specified for the data retrieved from the API.
Audit Metadata