canary-watch
Pass
Audited by Gen Agent Trust Hub on Apr 6, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: No malicious patterns, such as hardcoded credentials, unauthorized network exfiltration, or persistence mechanisms, were found. The skill is purely documentation-based.
- [NO_CODE]: The skill is comprised of a single markdown file containing instructions and configuration examples. It does not include any executable scripts, binaries, or external code dependencies.
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) because it processes untrusted data from external URLs. 1. Ingestion points: External URLs provided as arguments to the /canary-watch command in SKILL.md. 2. Boundary markers: None identified in the provided instructions. 3. Capability inventory: The skill instructs the agent to analyze HTTP status, console errors, network failures, and page content; it does not request dangerous capabilities like arbitrary command execution. 4. Sanitization: No explicit sanitization or filtering of external content is described.
Audit Metadata