skills/decolua/9router/9router-chat/Gen Agent Trust Hub

9router-chat

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references setup instructions hosted on the author's official GitHub repository (decolua/9router).
  • [COMMAND_EXECUTION]: Provides example shell commands using curl to demonstrate API usage, appropriately utilizing environment variables for configuration.
  • [INDIRECT_PROMPT_INJECTION]: As a chat interface, the skill processes user-provided data for LLM interaction, which is a standard surface for potential indirect prompt injection. (1) Ingestion points: User content is passed via the messages parameter in the provided API examples (SKILL.md). (2) Boundary markers: No specific delimiters or instruction-bypass warnings are included in the implementation examples. (3) Capability inventory: The skill uses network capabilities through curl and the openai Node.js library. (4) Sanitization: No input sanitization is demonstrated in the basic usage examples.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:43 PM