mlb-two-start-scout
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions define workflows for fetching data from well-known sports websites such as FantasyPros, FanGraphs, RotoWire, and Yahoo. These are established services in the fantasy sports domain and are used for their intended analytical purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from external web searches. While this creates a potential attack surface for indirect prompt injection from compromised or malicious web content, the skill does not request or use capabilities that would allow for privilege escalation, command execution, or unauthorized file access. The data is processed into structured tables, which mitigates the risk of instructions being interpreted as agent commands.
- [NO_CODE]: The skill consists entirely of markdown instructions and configuration files. It does not include or execute any scripts or binary files, reducing the risk of hidden malicious code execution.
Audit Metadata