9router-chat
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references setup instructions hosted on the author's official GitHub repository (decolua/9router).
- [COMMAND_EXECUTION]: Provides example shell commands using
curlto demonstrate API usage, appropriately utilizing environment variables for configuration. - [INDIRECT_PROMPT_INJECTION]: As a chat interface, the skill processes user-provided data for LLM interaction, which is a standard surface for potential indirect prompt injection. (1) Ingestion points: User content is passed via the
messagesparameter in the provided API examples (SKILL.md). (2) Boundary markers: No specific delimiters or instruction-bypass warnings are included in the implementation examples. (3) Capability inventory: The skill uses network capabilities throughcurland theopenaiNode.js library. (4) Sanitization: No input sanitization is demonstrated in the basic usage examples.
Audit Metadata