protocolsio-integration
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data from the protocols.io API, which could potentially contain malicious instructions embedded within protocol steps, descriptions, or comments.
- Ingestion points: Data is retrieved through various API endpoints described in
references/protocols_api.md,references/discussions.md, andreferences/file_manager.md, including protocol text, step content, and user-generated comments. - Capability inventory: The skill instructions include network operations (via the Python
requestslibrary andcurl) and file system interactions (via file downloads and uploads documented inreferences/file_manager.mdandSKILL.md). - Boundary markers: The provided documentation and instructions do not define explicit delimiters or include warnings for the agent to ignore instructions that might be embedded within the processed protocol data.
- Sanitization: There are no specific instructions or examples for sanitizing, validating, or escaping external content before it is processed by the agent's language model context.
Audit Metadata