hotmart-api
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to interact with and process data from various Hotmart API endpoints. These responses contain fields populated by end-users (e.g., buyer names, student names, product descriptions) that serve as potential injection vectors.
- Ingestion points: Data is ingested through API responses described in
references/sales.md(buyer info),references/club.md(student profiles), andreferences/tickets.md(participant details). - Boundary markers: The instructions do not define boundary markers or explicit 'ignore' instructions for content retrieved from these external sources.
- Capability inventory: The skill enables the agent to perform network operations (GET, POST, PUT, DELETE) across multiple domains and uses this data to generate code or maintain integrations.
- Sanitization: There is an absence of instructions for validating or sanitizing external API data before the agent processes it or includes it in subsequent context windows.
Audit Metadata