curo-peptide-research

Pass

Audited by Gen Agent Trust Hub on Nov 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill utilizes an external Model Context Protocol (MCP) server located at https://mcp.curo.you to provide its core functionality. This server is a vendor-owned resource used to fetch research data and product information.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, specifically the PepBank research database and the vendor's product catalog. This ingestion represents a potential attack surface.
  • Ingestion points: Data is retrieved via the peptide_research and search_research tools from mcp.curo.you and pepbank.io.
  • Boundary markers: No specific delimiters or "ignore" instructions are defined for the ingested research data in SKILL.md.
  • Capability inventory: The skill is capable of generating shopping cart links via the build_cart tool but lacks capabilities for file system access or arbitrary shell execution.
  • Sanitization: No explicit sanitization or validation of the external content is described in the skill instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 2, 2026, 06:22 PM