mev-security
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches a resource list from the author's GitHub repository located at
https://raw.githubusercontent.com/gmh5225/awesome-web3-security/refs/heads/main/README.md. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from an external source, creating a potential surface for indirect prompt injection.
- Ingestion points: Content is fetched from an external
README.mdfile as specified inSKILL.md. - Boundary markers: No specific delimiters or instructions to ignore embedded instructions within the fetched data are provided.
- Capability inventory: The skill body does not contain command execution or file system write operations; it primarily organizes information.
- Sanitization: No explicit sanitization or validation of the remote content is performed before processing.
Audit Metadata