llms-txt-support
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes documentation content fetched from external, potentially untrusted sources via
curlandWebFetch. This creates a vulnerability surface where malicious instructions could be embedded in the documentation files. - Ingestion point:
curlfetches content from target URLs in Step 1 and Step 4. - Boundary markers: The skill includes checkpoints for availability but does not specify explicit prompt delimiters or 'ignore' instructions for the ingested content.
- Capability inventory:
curl(network/write),grep,cp,head(file system),skill-seekers(external tool). - Sanitization: Content validation is limited to checking for error pages and file size rather than content safety.
- [EXTERNAL_DOWNLOADS]: The skill uses
curlto fetch documentation from remote URLs. This behavior is central to its stated purpose of ingesting LLM-optimized documentation from the web. - [COMMAND_EXECUTION]: The skill utilizes shell commands including
curl,grep,head, andcpto interact with the file system and perform network requests as part of its documented workflow.
Audit Metadata