coss-particles
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides numerous links to fetch UI component manifests from the vendor's official domain (coss.com).
- [INDIRECT_PROMPT_INJECTION]: The skill instructions define an ingestion surface where the agent is expected to fetch and process external JSON manifests. This represents a safe usage of vendor-controlled resources. Ingestion points: Particle JSON URLs (SKILL.md); Boundary markers: Absent; Capability inventory: None detected; Sanitization: Absent.
- [COMMAND_EXECUTION]: The documentation mentions a maintenance command (node apps/ui/scripts/generate-particle-index.cjs) used for manual generation of the particle index.
Audit Metadata