unicorn-or-bust
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes a tool definition from Smithery, a well-known platform for hosting and distributing MCP (Model Context Protocol) servers. This is standard configuration for skills requiring external tool functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-provided content, such as character names and startup pitches, which are subsequently passed to the game tools.
- Ingestion points: User input for Founder Name and Pitch in
SKILL.mdvia thestart_gametool. - Boundary markers: None explicitly defined in the instructions to separate user input from system intent.
- Capability inventory: The skill is limited to calling
start_gameandplay_turnfunctions on the specified MCP server. - Sanitization: No explicit sanitization or validation of the user-provided strings is mentioned in the instructions.
Audit Metadata