better-auth-protected-routes
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch a markdown file from an external domain (
fullstackrecipes.com). While the content is a document, it originates from a third-party source not explicitly verified as a trusted provider. - [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface by ingesting external data that the agent is expected to process and follow.
- Ingestion points: Remote markdown file content fetched via
curlas described inSKILL.md. - Boundary markers: Absent; there are no instructions provided to the agent to treat the fetched content as untrusted or to ignore embedded instructions.
- Capability inventory: The agent is intended to use the instructions within the fetched markdown to perform setup tasks for route protection.
- Sanitization: No validation or filtering of the remote content is performed before the agent processes it.
Audit Metadata