epub-scan-config
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a JSON schema file hosted on the vendor's GitHub repository (
https://raw.githubusercontent.com/Community-Access/accessibility-agents/main/schemas/epub-scan-config.schema.json). This is a standard resource used for validating the configuration file structure. - [INDIRECT_PROMPT_INJECTION]: The skill operates on the
.a11y-epub-config.jsonfile, which could potentially contain untrusted data if present in a workspace. - Ingestion points: Reading and parsing the existing
.a11y-epub-config.jsonfile inSKILL.md. - Boundary markers: None explicitly defined for the file content, though the skill operates on structured JSON.
- Capability inventory: Limited to writing the validated configuration back to the
.a11y-epub-config.jsonfile. - Sanitization: The skill mandates JSON validation before writing, requires preservation of unrecognized keys, and strictly requires user confirmation before saving any changes.
Audit Metadata