codevasp-unhosted-wallet-guide
Pass
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches remote markdown documentation from the vendor's official domain at docs.codevasp.com. This behavior is consistent with the skill's primary purpose of providing developers with current integration references.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content fetched from external URLs, which represents an ingestion surface for potential instructions embedded in remote data. This is an inherent property of documentation-fetching skills, and the risk is managed here by limiting the scope to the official vendor documentation.
Audit Metadata