scout
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves data from well-known developer services and clones repositories for deep analysis.\n
- Ingestion points: Step 1 and Step 2 instructions describe usage of api.npmjs.org, pypistats.org, deps.dev, and the GitHub API for project ranking and reconnaissance.\n
- Context: These are well-known developer services, and the data retrieval is central to the skill's primary function of competitive analysis.\n- [PROMPT_INJECTION]: The skill processes untrusted external data, creating a potential surface for indirect prompt injection.\n
- Ingestion points: Step 2 mines external issue trackers, release notes, and documentation. Deep mode clones and reads arbitrary repository source code.\n
- Boundary markers: The instructions do not define explicit delimiters to segregate external content from agent instructions, though it emphasizes evidence and locators.\n
- Capability inventory: The agent can read and write project files, make network requests, and execute basic shell commands.\n
- Sanitization: No specific filtering or escaping of the mined external content is required by the instructions.\n- [COMMAND_EXECUTION]: The skill uses a simple shell command to determine the current date for reporting purposes.\n
- Evidence: Step 5 uses
date +%Fto generate a filename slug.\n - Context: This is a standard, non-malicious operation for timestamping output files.
Audit Metadata