dedalexicon-terminology

Pass

Audited by Gen Agent Trust Hub on Jul 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill retrieves data from https://termviewer.dedalus.com. This is the core functionality of the skill and targets infrastructure associated with the author, 'dedalus-erp-pas'.
  • [COMMAND_EXECUTION]: Uses the Bash tool to execute curl commands for API interaction. This is a documented implementation detail for querying the internal terminology base when running in an environment with the necessary credentials.
  • [PROMPT_INJECTION]: As the skill ingests data from an external API, it possesses an attack surface for indirect prompt injection.
  • Ingestion points: API search results from termviewer.dedalus.com (referenced in SKILL.md and reference/api.md).
  • Boundary markers: Not specified in the documentation or provided processing scripts.
  • Capability inventory: WebFetch, Bash.
  • Sanitization: No explicit sanitization or filtering of API content is demonstrated in the included Python utility script.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 9, 2026, 02:03 PM
Security Audit — agent-trust-hub — dedalexicon-terminology