xctf-data
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to install an external package named
sports-skills. It provides a direct installation path from a GitHub repository:https://github.com/machina-sports/sports-skills.git. This package is provided by the skill's author and is required for functionality. - [COMMAND_EXECUTION]: The skill uses local shell commands to check for the presence of the
sports-skillsCLI and includes a helper scriptscripts/validate_params.shthat uses shell-based parameter validation logic. - [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (TFRRS and The Stride Report), creating a surface for potential indirect prompt injection attacks where malicious instructions could be embedded in sports data.
- Ingestion points: Data is retrieved from athlete profiles (names, PRs) and news article summaries via external URL requests in the
get_athlete_profile,get_meet_results, andget_newscommands. - Boundary markers: No specific delimiters or instructions to the agent are defined to separate user/agent instructions from the fetched athlete or news data.
- Capability inventory: The skill leverages the
sports-skillsCLI to make network requests totfrrs.organdthestridereport.com. - Sanitization: The instructions do not define sanitization procedures for the external content before it is processed by the agent.
Audit Metadata