skills/aisa-team/agent-skills/aisa/Gen Agent Trust Hub

aisa

Pass

Audited by Gen Agent Trust Hub on Oct 22, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the aisa CLI to perform search, quote, and call operations. These are standard tool-calling mechanisms provided by the vendor to interact with their platform.
  • [EXTERNAL_DOWNLOADS]: The skill references a remote MCP endpoint at https://tools.aisa.one/mcp and documentation at aisa.one. These are verified vendor-owned resources and do not represent unauthorized external communication.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests tool metadata and schemas via search results which are external data. While this presents an attack surface, the instructions specifically mitigate risk by directing the agent to use only the structured results provided by the search and schema tools and prohibiting the invention of tool IDs or arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 22, 2026, 07:13 PM