han-river-water-level
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill connects to an external proxy server (https://k-skill-proxy.nomadamas.org) to fetch water level and flow data.
- [COMMAND_EXECUTION]: The instructions utilize the curl command-line tool to make GET requests to the proxy API.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests and summarizes data from an external source.
- Ingestion points: https://k-skill-proxy.nomadamas.org/v1/han-river/water-level in SKILL.md.
- Boundary markers: None identified; the agent is instructed to summarize the response directly.
- Capability inventory: Shell command execution via curl and jq in SKILL.md.
- Sanitization: No response validation or content filtering is implemented for the data retrieved from the proxy.
Audit Metadata