keyword-lists
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documentation defines routine REST API interactions for keyword organization and management. No evidence of prompt injection, data exfiltration, persistence mechanisms, or unauthorized command execution was found.
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves keyword data and list metadata from an external API (e.g., via the /api/v1/lists endpoint), which technically establishes an attack surface for indirect prompt injection. However, this is a standard functionality for the intended use case, and no specific malicious patterns or instructions were identified in the ingestion path.
Audit Metadata