lithium-battery-safety
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions require the agent to search for and process data from external, untrusted sources, such as Reddit (specifically r/spicypillows), YouTube, and general web searches for local emergency guidance.
- Ingestion points: Web search results, community forums, and video platforms are accessed via instructions in
references/symptoms-and-emergencies.md. - Boundary markers: Absent. The instructions do not specify the use of delimiters or 'ignore' instructions when evaluating external search results.
- Capability inventory: The agent uses web search capabilities and content summarization to display relevant safety images and instructions to the user.
- Sanitization: Absent. There are no instructions to sanitize or validate the content retrieved from external websites.
- [EXTERNAL_DOWNLOADS]: The skill contains references to external documentation for electronic components, including datasheets and schematics from Waveshare, ETA-Semi, and The Pi Hut (
references/compatibility-example.md). These references are necessary for the technical compatibility checks described in the skill.
Audit Metadata