deepgram-security-basics
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for processing external audio URLs, which serves as an ingestion point for untrusted data into the agent's context.
- Ingestion points: The
urlparameter used intranscribeUrlfunctions withinSKILL.mdandreferences/implementation.mdaccepts external input. - Boundary markers: As the skill consists of code templates and instructions, specific prompt boundaries for data ingestion are not predefined within the instructions themselves.
- Capability inventory: The skill's configuration includes access to file system modification and network tools, which could be relevant if input validation logic is bypassed.
- Sanitization: The skill proactively addresses this risk by providing logic (Step 5: Audio URL Validation) designed to prevent Server-Side Request Forgery (SSRF) and ensure only secure HTTPS protocols are used.
Audit Metadata