inference-indexer
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests natural language text from the InferenceIndexer API (specifically the
whyfield) and explicitly instructs the agent to "Trust the why string over your own priors." This creates a surface where instructions returned by the API could override agent behavior or influence its decision-making process. - Ingestion points: Results from the
recommend_modelsandexplain_modeltools. - Boundary markers: No delimiters or instructions to ignore embedded commands within the API response are present.
- Capability inventory: The agent uses the API data to select, price-check, and provide configuration for AI model endpoints.
- Sanitization: There is no evidence of sanitization or validation of the text content received from the external API.
- [EXTERNAL_DOWNLOADS]: The skill references external resources provided by the vendor for its primary functionality.
- Evidence: The skill points to an MCP configuration file at
https://www.inferenceindexer.ai/.well-known/mcp-config.jsonand a Python packageinferenceindexer-mcpon PyPI. - Context: These resources are hosted on the vendor's own infrastructure and are required for the skill's stated purpose.
Audit Metadata