gohighlevel-pricing-lookup
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests to the author's official domain (anthonyhunts.com) to fetch pricing data. This is a legitimate vendor resource used for the skill's intended purpose.
- [INDIRECT_PROMPT_INJECTION]: Processing external API responses creates a potential surface for indirect prompt injection. However, the source is the author's domain and the skill lacks any capabilities to execute commands or write files. 1. Ingestion points: Pricing API response referenced in SKILL.md. 2. Boundary markers: None present. 3. Capability inventory: No execution or write capabilities identified. 4. Sanitization: None identified.
Audit Metadata