solo-knowledge
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external URLs and synthesizes responses without employing boundary markers or sanitization, creating a surface where malicious instructions in the source content could influence the agent's behavior.
- Ingestion points: Content is fetched from
https://rustman.org/llms.txtandhttps://rustman.org/wiki/{slug}via theWebFetchtool, as specified inSKILL.md. - Boundary markers: Absent. There are no instructions to use delimiters or ignore embedded instructions when processing the fetched text.
- Capability inventory: The skill uses
WebFetch,Read,Grep, andGlobtools, enabling it to access both remote URLs and local files. - Sanitization: Absent. The skill does not perform any validation or filtering on the retrieved information before synthesis.
- [EXTERNAL_DOWNLOADS]: The skill relies on fetching content from an external domain,
rustman.org, to populate its knowledge base. - [COMMAND_EXECUTION]: The documentation in
SKILL.mdincludes acurlcommand to manually update the localreferences/llms-snapshot.txtfile and usesGrepfor searching local files in offline mode.
Audit Metadata