catalyst-setup
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to configure access to a remote MCP server at
https://mcp.cloud.r1.diagrid.io/mcp. This is a vendor-owned resource hosted by the skill's author, Diagrid, and is the standard method for providing Catalyst tooling. - [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from the Catalyst platform (e.g., via the
catalyst_whoamitool). - Ingestion points: The agent processes output returned by the
catalyst_whoamitool in SKILL.md. - Boundary markers: There are no explicit delimiters or instructions defined to isolate the tool's output from the agent's control logic.
- Capability inventory: The environment provides the
catalyst_*toolset, enabling read and write operations within the user's Catalyst organization. - Sanitization: The skill does not specify any sanitization or validation protocols for data retrieved from the remote API.
Audit Metadata