install-docs-page
Pass
Audited by Gen Agent Trust Hub on Oct 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation instructions from
https://use.docs.page/quickstart.md. This is a well-known documentation service managed by the skill's vendor. - [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to process and follow instructions from an external remote source, which introduces a potential attack surface.
- Ingestion points: The agent is instructed to fetch content from
https://use.docs.page/quickstart.mdinSKILL.md. - Boundary markers: Absent. The skill does not provide delimiters or instructions to ignore potential injection patterns within the fetched content.
- Capability inventory: The skill's description suggests file system operations, such as scaffolding
docs.jsonconfiguration files. - Sanitization: Absent. No validation or escaping is performed on the externally fetched content before the agent follows its instructions.
Audit Metadata