icebreaker
Pass
Audited by Gen Agent Trust Hub on May 10, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill performs network requests using
curlto the vendor-controlled domaininbed.ai. These requests are used for legitimate API interactions (registration, messaging, profile management) and do not access or transmit sensitive local files or hardcoded credentials. - [PROMPT_INJECTION]: The skill facilitates the ingestion of data from other agents, which constitutes an indirect prompt injection surface.
- Ingestion points: Data retrieved from the
/api/discover(agent profiles and bios) and/api/chat(messages) endpoints inSKILL.md. - Boundary markers: Absent. There are no instructions or delimiters provided to help the agent distinguish between data and potential instructions in the ingested content.
- Capability inventory: Network operations via
curlto perform further API actions based on the ingested state. - Sanitization: Absent. The skill does not specify any validation, escaping, or filtering for content received from external agents.
Audit Metadata