ape-help-me-understand
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses WebFetch and curl to retrieve content from external URLs provided by the user, including web pages and PDF research papers. This is a primary function of the skill but involves interacting with arbitrary remote sources.- [COMMAND_EXECUTION]: The skill instructions direct the agent to use shell-level utilities like curl and pdftotext to process PDF files and extract their content for summarization.- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection through its ingestion of untrusted data. Ingestion points: User-specified file paths and remote URLs. Boundary markers: None; the skill does not provide instructions to the agent to distinguish between the content to be summarized and potential instructions hidden within that content. Capability inventory: The agent can perform network requests, read local files, and write new files to the disk. Sanitization: The skill lacks any explicit sanitization or filtering logic for the ingested source text.
Audit Metadata