directory-submissions
Fail
Audited by Gen Agent Trust Hub on Nov 10, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Automated security scanners identified malicious components within the skill package. Specifically, a blacklisted URL (https://fitprofessionals.net) is included in the directory listings (references/directory-list.md) and the submission tracker (references/submission-tracker-template.csv). The file 'references/submission-tracker-template.csv' itself was flagged as malicious (FileRepMalware) by automated reputation-based scanners.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch HTML content from external, untrusted directory websites using 'curl' to verify the presence of backlinks. This ingestion of external content creates an attack surface for indirect prompt injection. While the skill includes explicit instructions for the agent to treat this data as untrusted and to ignore embedded instructions or prompt-injection attempts, the lack of programmatic sanitization of the fetched content remains a vulnerability factor.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata