camunda-docs
Fail
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: HIGHCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The scripts/docs-search.sh file contains a hardcoded API_KEY and APP_ID used for Algolia search authentication.
- [EXTERNAL_DOWNLOADS]: The skill performs network requests to docs.camunda.io and Algolia's search infrastructure, both of which are trusted vendor resources.
- [COMMAND_EXECUTION]: The skill executes a local shell script (scripts/docs-search.sh) that uses curl and jq to interact with external APIs.
- [INDIRECT_PROMPT_INJECTION]: The retrieval and processing of external documentation content creates an attack surface where malicious instructions could be embedded in the source data.
Recommendations
- AI detected serious security threats
Audit Metadata