9router-embeddings

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: References setup instructions from a remote repository at https://raw.githubusercontent.com/decolua/9router/refs/heads/master/skills/9router/SKILL.md.- [COMMAND_EXECUTION]: Provides template curl commands for interacting with the 9Router API endpoints, using user-defined environment variables for the URL and authentication key.- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text to generate embeddings, which creates a surface for potential indirect instructions if the input data is sourced from untrusted external content.
  • Ingestion points: The input field in the POST request body within SKILL.md.
  • Boundary markers: None identified.
  • Capability inventory: Network communication using curl and fetch to external endpoints.
  • Sanitization: No explicit sanitization of input strings before being sent to the embedding provider.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:45 PM