ai-llm-skills-guide
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references a remote README.md file from the author's GitHub repository at
https://raw.githubusercontent.com/gmh5225/awesome-skills/refs/heads/main/README.md. This is a vendor-owned resource used to provide supplementary documentation. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch and process external data from a remote URL, creating a potential surface for indirect prompt injection if the source content were to be manipulated.
- Ingestion points:
SKILL.md(Full Resource List section) - Boundary markers: None specified in the instructions for processing the fetched README content.
- Capability inventory: The skill is primarily informational and does not define access to dangerous system tools in its configuration.
- Sanitization: No sanitization or filtering logic is provided for the external content.
Audit Metadata