lucidchart-rate-limits
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it fetches external content. Ingestion points: Uses
WebFetchto read Lucid developer documentation (SKILL.md, references/official-docs.md). Boundary markers: None explicitly defined for the fetched content. Capability inventory: The skill usesWriteandEditto update local code and policy (SKILL.md). Sanitization: The skill explicitly requires using 'sanitized response headers/bodies' and 'redacted evidence' (SKILL.md). This surface is considered safe as it is essential to the skill's primary purpose and includes appropriate mitigation instructions. - [EXTERNAL_DOWNLOADS]: The skill references official Lucid developer documentation and status pages. These are well-known, trusted resources directly related to the skill's functionality.
- [DATA_EXFILTRATION]: The skill contains defensive instructions to prevent accidental data exfiltration, specifically warning against credential pooling and instructing the agent to keep authentication tokens out of metrics and logs (SKILL.md).
Audit Metadata