apps-manage-discord
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external Discord resources (such as role names and channel topics) when inspecting existing configurations, which represents a potential injection surface.
- Ingestion points: Data retrieved via
apps_get_discord_roleandapps_get_discord_channelas defined inSKILL.md. - Boundary markers: The skill does not specify the use of delimiters or specific instructions for the agent to ignore embedded commands in the tool output.
- Capability inventory: The skill allows for writing, updating, and deleting Discord resources through the Apps API.
- Sanitization: No explicit sanitization or validation of the content of Discord metadata is described in the reference documentation.
Audit Metadata