shared-forest
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external API (https://sharedforest.com/api/forest) to report forest statistics, creating a potential surface where malicious content in the response could influence the agent's behavior. * Ingestion points: The 'Read the forest' section in SKILL.md fetches data from an external source. * Boundary markers: The skill does not specify any delimiters or instructions to ignore embedded commands in the API response. * Capability inventory: The skill has network access via curl and the ability to execute system utilities. * Sanitization: No response validation or content filtering is described.
- [DATA_EXFILTRATION]: The skill performs network operations via curl to https://sharedforest.com, which is not a whitelisted domain for data exfiltration analysis.
- [COMMAND_EXECUTION]: The skill documentation provides examples of using curl with command substitution for the uuidgen utility, involving the execution of local system commands.
Audit Metadata