searching-mlflow-docs
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches documentation and index files from the official MLflow domain (mlflow.org).
- [PROMPT_INJECTION]: The skill processes content fetched from an external website without using boundary markers or sanitization. This creates a surface for indirect prompt injection if the source content were compromised.
- Ingestion points: External URLs (mlflow.org) fetched using WebFetch in SKILL.md.
- Boundary markers: The instructions do not specify delimiters or 'ignore embedded instructions' warnings for the fetched content.
- Capability inventory: The skill uses the WebFetch tool to retrieve remote documentation.
- Sanitization: No sanitization or validation of the fetched documentation content is performed before processing.
Audit Metadata