fetch-and-send-data
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for building applications that ingest data from external APIs. It includes security guidance to mitigate risks associated with untrusted data.
- Ingestion points: Components fetch data from external APIs using HttpClient (SKILL.md).
- Boundary markers: Recommends using ErrorBoundary to manage unexpected output.
- Capability inventory: Includes network communication via HttpClient and logging via ILogger.
- Sanitization: Explicitly forbids displaying exception.Message to prevent PII or internal system details from being exposed to the user.
- [EXTERNAL_DOWNLOADS]: The skill references a standard Microsoft NuGet package for typed HttpClient support.
- Evidence: Mentions Microsoft.Extensions.Http (SKILL.md).
Audit Metadata