awesome-tools
Pass
Audited by Gen Agent Trust Hub on Nov 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches configuration and validation requirements from
https://awesome.tools/api/agent/submissionsandhttps://awesome.tools/api/agent/openapi.json. - [COMMAND_EXECUTION]: The skill uses
curlto interact with the Awesome Tools API for validating and submitting product information. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as product names, website URLs, and submitter notes to populate API requests.
- Ingestion points: Fields such as
name,websiteUrl,submitterName, andsubmitterEmailprovided by the requester. - Boundary markers: Instructions explicitly state to replace placeholders with authorized requester values.
- Capability inventory: The skill can perform network operations via
curland MCP tools to send data to theawesome.toolsdomain. - Sanitization: Data is formatted as structured JSON for API transmission, though no explicit sanitization step is described in the instructions.
Audit Metadata