pricing-page
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill references accessing authentication credentials from
~/.build-host/credentials.json. This access is legitimate and required for the skill's primary purpose of deploying projects to the vendor's own platform. - [PROMPT_INJECTION]: The skill exhibits a vulnerability surface for indirect prompt injection as it processes untrusted YAML data provided by the user.
- Ingestion points: User-supplied YAML data describing pricing tiers and features.
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are present in the instructions.
- Capability inventory: The skill is authorized to make network requests to the build.host API and generate files in the local project directory.
- Sanitization: There are no instructions to validate or sanitize the input YAML before it is processed by the agent.
Audit Metadata