groq-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a workflow that ingests and processes external data, establishing a surface for indirect prompt injection.
- Ingestion points: Data enters the context via headers in the parseRateLimitHeaders function and messages in completion wrappers within references/implementation.md.
- Boundary markers: The instructions and code templates in SKILL.md and references/implementation.md do not implement delimiters or ignore-instructions for ingested data.
- Capability inventory: The skill utilizes groq-sdk for network operations and utilizes file system access tools as defined in SKILL.md.
- Sanitization: The code in references/implementation.md lacks validation or escaping logic for external header values or message payloads.
- [EXTERNAL_DOWNLOADS]: The skill relies on external dependencies to function.
- The instructions direct the user to install the official groq-sdk and the p-queue library from the npm registry.
- These are recognized, well-known resources for Groq API integration and JavaScript concurrency management.
Audit Metadata