start-middleware
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill facilitates Indirect Prompt Injection through the
sendContextmechanism which allows untrusted data to move from the client to the server environment.\n - Ingestion points: The
sendContextproperty increateMiddleware(detailed inreferences/context.mdandSKILL.md) is a direct entry point for client-supplied data into the agent's server-side context.\n - Boundary markers: The documentation explicitly includes strong warnings and "Critical Rules" advising developers that
sendContextis untrusted and must be verified against server-trusted sessions (e.g., cookies or database records).\n - Capability inventory: Middleware scripts have the capability to perform database operations, modify request headers, and influence the execution flow of downstream server functions based on this untrusted data.\n
- Sanitization: The skill provides templates using the
zodlibrary for schema validation and demonstrates database-level authorization checks to mitigate the risks associated with processing client-sent identifiers.
Audit Metadata