outline
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to its core functionality of reading external content.\n
- Ingestion points: Untrusted document content is ingested via the
search,read, andlist-documentsoperations inscripts/outline.py.\n - Boundary markers: The skill does not implement specific delimiters or instructions to the agent to ignore potentially malicious instructions embedded within wiki content.\n
- Capability inventory: The skill includes network access via the
httpxlibrary and the ability to write document content to local file paths using theexportcommand with the--outputflag.\n - Sanitization: There is no evidence of content sanitization or validation for the text returned from the Outline API.\n- [EXTERNAL_DOWNLOADS]: The skill performs legitimate network operations to the Outline API (defaulting to
https://app.getoutline.com/api) to retrieve and manage wiki documents.\n- [CREDENTIALS_UNSAFE]: The skill requires anOUTLINE_API_KEYfor authentication. It correctly instructs users to manage this secret via environment variables or a local.envfile, which is a standard and recommended practice.
Audit Metadata