cia-data-integration
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches JSON data and schemas from the author's official domains (
hack23.com) and GitHub repositories (github.com/Hack23). These operations are consistent with the skill's stated purpose of data synchronization and integration. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external JSON exports, which represents a potential attack surface. However, the skill implements robust defensive measures.
- Ingestion points: Data is fetched from external API endpoints in
SKILL.mdviaCIAExportClient.fetchExport. - Boundary markers: The skill explicitly requires validation against JSON schemas before any data is processed or cached.
- Capability inventory: The skill includes network fetching capabilities and automated file system writes/git operations through GitHub Actions.
- Sanitization: Uses the
ajvvalidation library to ensure incoming data conforms to expected structures before it enters the workflow.
Audit Metadata