pov-vlog-presence-by-v2wqfs
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill requires the agent to inspect external media and web pages, which could host malicious instructions intended to influence the agent's output or behavior.
- Ingestion points:
references/cases.mddirects the agent to access and analyze content fromgoodcase.aiandx.comusing browser or media inspection tools. - Boundary markers: The instructions lack explicit safety delimiters or warnings to ignore instructions that might be embedded within the external metadata or page content.
- Capability inventory: The agent is tasked with browsing, media analysis, and generating complex text-based prompt artifacts based on the fetched data.
- Sanitization: There is no requirement or logic provided for sanitizing or filtering content retrieved from these external sources.
- [EXTERNAL_DOWNLOADS]: The skill depends on resources from non-whitelisted external domains for its core functionality.
- Evidence: The file
references/cases.mdcontains several links togoodcase.aiandmedia.goodcase.ai. The workflow inSKILL.mdexplicitly instructs the agent to "Inspect the anchor's finished media" via these external links.
Audit Metadata