bascik-compatibility
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to
https://api.webstatus.dev(Web Platform Status API) andhttps://bascik.dev(the vendor's documentation site) to fetch compatibility data. These are legitimate, well-known, and vendor-appropriate sources for the skill's stated purpose. - [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes external HTML and JSON data to provide information to the agent.
- Ingestion points: Data is fetched in
scripts/baseline.mjs(Web Platform Status API) andscripts/lookup.mjs(Bascik compatibility matrix). - Boundary markers: None explicitly present for the agent, but data is filtered and formatted before display.
- Capability inventory: The skill has network access via
fetch. It does not have file-write or subprocess capabilities for the ingested data. - Sanitization: The scripts perform basic text extraction and decoding of HTML entities for display purposes.
Audit Metadata