canary-watch
Pass
Audited by Gen Agent Trust Hub on Jul 4, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [NO_CODE]: The skill consists entirely of markdown documentation and instructions, containing no executable scripts, configuration files, or dependency manifests.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through its core functionality of monitoring external URLs. 1. Ingestion points: The skill processes external page content, console logs, and network responses from user-provided URLs. 2. Boundary markers: No delimiters or 'ignore embedded instructions' warnings are specified in the guidance. 3. Capability inventory: Functionality implies usage of browser automation tools to inspect and read external website state. 4. Sanitization: No content sanitization or validation of the fetched data is described.
Audit Metadata