audit-hosting
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
curlto check the HTTP status and headers of user-managed domains to verify they are properly routed to Hostinger infrastructure. These checks are diagnostic and restricted to domains retrieved from the official API. - [INDIRECT_PROMPT_INJECTION]: The skill processes potentially untrusted data from multiple sources to generate its reports.
- Ingestion points: Data is ingested from Hostinger API responses (such as WordPress plugin names, versions, and vulnerability descriptions) and from external HTTP headers of audited websites.
- Boundary markers: No specific delimiters are used to separate API data from instructions.
- Capability inventory: The skill uses
curlfor network connectivity checks and provides recommendations for other tools to perform modifications (e.g., patching vulnerabilities). It does not perform file system modifications or execute code directly from the ingested data. - Sanitization: The instructions do not specify sanitization for the ingested API data before processing it for the report.
Audit Metadata