edgeone-pages-dev
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides numerous links to project templates hosted on the TencentEdgeOne GitHub organization and live previews on the edgeone.site and edgeone.run domains. These resources are standard vendor-provided starter kits for Go, Node.js, and Python runtimes, intended to facilitate rapid development on the EdgeOne Pages platform.
- [INDIRECT_PROMPT_INJECTION]: As a development assistant skill, this skill possesses an ingestion surface where it processes user-defined application requirements to generate code.
- Ingestion points: User-provided specifications for APIs, serverless functions, and middleware logic.
- Boundary markers: The skill includes a 'Decision Tree' and a list of 'Critical Rules' that constrain how the agent should interpret and implement user requests.
- Capability inventory: The generated code templates include capabilities for network requests (Fetch API), database connectivity (MySQL2), and environment variable access, which are essential for the skill's primary purpose.
- Sanitization: The skill provides instructions on platform-specific best practices, such as using V8-standard Response objects and specific directory structures to ensure proper execution environment isolation.
Recommendations
- CRITICAL: 1 file(s) identified as malware by FileRep - DO NOT USE
- Contains 21 malicious URL(s) - DO NOT USE
Audit Metadata