ramp-install-auth
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with the Ramp API and processes its JSON responses, creating a surface where untrusted data enters the agent context.
- Ingestion points: Data from
token_resp.json()andresp.json()in SKILL.md. - Boundary markers: None provided to delimit the data processed from the API.
- Capability inventory: Network access via the
requestslibrary in SKILL.md. - Sanitization: No sanitization or validation of API response content is demonstrated.
- [EXTERNAL_DOWNLOADS]: The skill makes network requests to obtain authentication tokens and fetch card data.
- Fetches information from
sandbox-api.ramp.comandapi.ramp.com, which are the official endpoints for the well-known Ramp service.
Audit Metadata