discord-py
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides numerous examples of bots that ingest untrusted data from external sources (Discord messages and interactions).
- Ingestion points: Untrusted data enters the agent context through
on_message(message)events inSKILL.mdandexamples.md, and throughdiscord.Interactionobjects in slash command handlers. - Boundary markers: The provided examples do not implement specific delimiters or 'ignore' instructions for user-provided strings before processing.
- Capability inventory: The skill includes capabilities to perform server management actions like
member.kick(),member.ban(), andchannel.purge()inexamples.mdandreference.md. - Sanitization: No specific sanitization or validation of the content from
message.contentorinteractionparameters is demonstrated before they are used in command responses or moderation actions. - [DYNAMIC_EXECUTION]: The skill demonstrates the standard library pattern for modular bot design using dynamic loading.
- Evidence: Examples in
examples.mdandreference.mdshow the use ofbot.load_extension("cogs.moderation")to load bot modules at runtime. This is the idiomatic way to organizediscord.pybots and uses static string paths in the examples.
Audit Metadata