asc-metrics
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests performance metrics from the Appeeky Connect API, creating a surface for potential indirect prompt injection attacks.
- Ingestion points: Data is fetched via GET requests to
/v1/connect/metricsendpoints described in SKILL.md. - Boundary markers: No delimiters or specific instructions to sanitize or ignore instructions within the data are present.
- Capability inventory: The skill does not include executable scripts, limiting the potential impact of an injection.
- Sanitization: No data validation or sanitization procedures are specified for the external API responses.
- [NO_CODE]: No executable script files or command-line utilities are distributed with the skill.
Audit Metadata