curo-peptide-research
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes an external Model Context Protocol (MCP) server located at
https://mcp.curo.youto provide its core functionality. This server is a vendor-owned resource used to fetch research data and product information. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external sources, specifically the PepBank research database and the vendor's product catalog. This ingestion represents a potential attack surface.
- Ingestion points: Data is retrieved via the
peptide_researchandsearch_researchtools frommcp.curo.youandpepbank.io. - Boundary markers: No specific delimiters or "ignore" instructions are defined for the ingested research data in
SKILL.md. - Capability inventory: The skill is capable of generating shopping cart links via the
build_carttool but lacks capabilities for file system access or arbitrary shell execution. - Sanitization: No explicit sanitization or validation of the external content is described in the skill instructions.
Audit Metadata