hyperindex
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions describe legitimate search and browse functionality for biodiversity data on the Hypersphere network.
- [DATA_EXPOSURE]: The skill identifies users using Telegram IDs provided in the message context to filter records. This is a functional requirement for the 'show me my observations' feature and does not involve exfiltration of unauthorized sensitive data.
- [EXTERNAL_DOWNLOADS]: The skill references 'hyperscan.gainforest.app', which is an official domain belonging to the skill author (GainForest). This is used for providing links to view records in a web interface.
- [INDIRECT_PROMPT_INJECTION]: While the skill processes data from the Hypersphere network, it includes specific instructions for formatting and display (HTML for Telegram) which reduces the likelihood of the agent executing instructions embedded in the record data.
Audit Metadata