linktree-hello-world
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data from Linktree's documentation and status pages, as well as local repository files, creating a surface for indirect prompt injection.
- Ingestion points: The skill uses
WebFetchto ingest content fromhelp.linktr.eeandstatus.linktr.ee. It also usesRead,Glob, andGrepto inspect local files such asreferences/official-docs.mdand campaign specifications. - Boundary markers: The instructions include clear boundaries, requiring the agent to "separate observed facts from assumptions" and use "redacted receipts."
- Capability inventory: The skill utilizes
WriteandEdittools for recording results andWebFetchfor network operations. - Sanitization: The instructions explicitly forbid searching credential files and mandate the redaction of sensitive information from receipts.
Audit Metadata