render-automation
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external Render API calls, creating a potential surface for indirect prompt injection.
- Ingestion points: The skill retrieves data from the Render platform using tools such as
RENDER_LIST_SERVICES,RENDER_RETRIEVE_DEPLOY, andRENDER_LIST_PROJECTSas described inSKILL.md. - Boundary markers: The instructions do not define specific delimiters or warnings for the agent to ignore potential instructions embedded in the API responses.
- Capability inventory: The skill utilizes MCP tools to manage cloud infrastructure, including the ability to trigger new deployments via
RENDER_TRIGGER_DEPLOY. - Sanitization: No explicit sanitization or validation of the data returned from the Render API is described within the skill instructions.
Audit Metadata