requests
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documents the installation of the
robotframework-requestslibrary and specialized authentication modules includingrequests-ntlmandrequests-aws4authfrom official package registries.\n- [COMMAND_EXECUTION]: The documentation includes standard shell commands for package installation usingpipand process verification usingcurl, as seen inSKILL.mdandreferences/troubleshooting.md.\n- [PRIVILEGE_ESCALATION]: The troubleshooting guide inreferences/troubleshooting.mdsuggests the use ofsudofor updating system-level CA certificates on Linux environments.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides the ability to ingest data from external REST APIs, establishing an attack surface for untrusted content.\n - Ingestion points: External data enters the agent context via API response bodies and headers using keywords like
${response.json()}and${response.text}.\n - Boundary markers: No explicit markers or delimiters are used to isolate ingested API data from the agent's internal instructions.\n
- Capability inventory: The skill possesses capabilities for network operations (HTTP methods), file system writes (e.g.,
Create Binary Fileinassets/examples/file-upload.robot), and arbitrary Python evaluation through theEvaluatekeyword.\n - Sanitization: The provided examples focus on functional validation and do not demonstrate escaping or sanitization of external content before processing.
Audit Metadata