locus-setup
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONTIME_DELAYED_CONDITIONAL
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests instructions from external documentation files.\n
- Ingestion points: External URLs
https://agent.email/skill.mdandhttps://paywithlocus.com/agent/auth.mdreferenced inSKILL.md.\n - Boundary markers: The skill includes explicit instructions to treat fetched content as untrusted data and ignore embedded instructions that deviate from the skill's purpose.\n
- Capability inventory: The skill performs HTTP API requests to the vendor endpoint
api.paywithlocus.comand stores credentials in the runtime's secret store.\n - Sanitization: Instructions direct the agent to only apply steps that match the skill's stated purpose and to verify the target of returned credentials.\n- [DYNAMIC_EXECUTION]: Executes a local Python command to generate a cryptographically secure 24-byte registration token using the
secretslibrary. This operation is limited to session security and restricted to the local environment.\n- [EXTERNAL_DOWNLOADS]: Fetches setup and authentication guidelines from vendor-controlled domains and related identity service providers required for the account creation flow.\n- [DATA_EXFILTRATION]: Manages sensitive credentials and OAuth tokens. The skill provides mandatory safety rules to ensure secrets are stored in approved secret stores and specifically warns against exposure in logs, chat history, or project files.\n- [TIME_DELAYED_CONDITIONAL]: Uses conditional polling logic to verify the status of funding sessions at suggested intervals until the transaction state is ready.
Audit Metadata