awesome-tools

Pass

Audited by Gen Agent Trust Hub on Nov 11, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches configuration and validation requirements from https://awesome.tools/api/agent/submissions and https://awesome.tools/api/agent/openapi.json.
  • [COMMAND_EXECUTION]: The skill uses curl to interact with the Awesome Tools API for validating and submitting product information.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data such as product names, website URLs, and submitter notes to populate API requests.
  • Ingestion points: Fields such as name, websiteUrl, submitterName, and submitterEmail provided by the requester.
  • Boundary markers: Instructions explicitly state to replace placeholders with authorized requester values.
  • Capability inventory: The skill can perform network operations via curl and MCP tools to send data to the awesome.tools domain.
  • Sanitization: Data is formatted as structured JSON for API transmission, though no explicit sanitization step is described in the instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 11, 2026, 04:42 PM