castai-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to ingest and process data from the external CAST AI API (e.g., fetching cluster savings and status), which creates an attack surface for indirect prompt injection if the API content were to be manipulated.
- Ingestion points: API responses from
https://api.cast.aiprocessed inSKILL.mdcode snippets. - Boundary markers: None defined in the logic to separate external data from agent instructions.
- Capability inventory: The skill utilizes network operations via the
fetchAPI. - Sanitization: There is no evidence of validation or sanitization for strings returned by the API (such as
status.agentStatus) before they are logged or processed.
Audit Metadata