gomtm-ipproxy
Pass
Audited by Gen Agent Trust Hub on May 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a remote data file located at
https://raw.githubusercontent.com/proxifly/free-proxy-list/main/proxies/countries/US/data.txt. This content is hosted in a third-party repository and is not from a verified or well-known vendor. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to retrieve and use data from an external source, creating a potential vector for indirect prompt injection if the fetched content is interpreted as instructions.
- Ingestion points: The URL in
SKILL.mdprovides an entry point for untrusted data into the agent's context. - Boundary markers: There are no delimiters or instructions to the agent to disregard any commands that might be embedded in the proxy list.
- Capability inventory: The skill's purpose (proxy usage) implies the agent may perform network operations based on the fetched data.
- Sanitization: No validation or sanitization steps are defined for the remote content before use.
Audit Metadata