anycap-worldcup-predict
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from the web via search and crawl operations, which is inherent to its primary purpose.
- Ingestion points: Data enters the context through
anycap searchresults and Wikipedia markdown retrieved viaanycap crawlas defined inreferences/lookup.mdandreferences/verify.md. - Boundary markers: The skill instructs the agent to request structured JSON and uses
sedto strip code fences, providing a level of isolation for data processing. - Capability inventory: The agent uses shell commands (
anycap,jq,sed,echo) to process retrieved data and write results to local files. - Sanitization: Relies on structured output prompting to maintain data integrity, though it lacks explicit sanitization for general text retrieved from external sources.
- [COMMAND_EXECUTION]: The skill utilizes standard system utilities including
jq,sed, andcolumnalongside theanycapCLI. All shell command templates are constructed with proper variable quoting to ensure safe execution during data processing and table generation. - [EXTERNAL_DOWNLOADS]: The skill performs network operations to retrieve player statistics and biographical data from the vendor's own API and authoritative sources like Wikipedia. These operations are transparently documented and consistent with the skill's stated purpose.
Audit Metadata