trade-association-member-leads
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The document contains an instruction to install a remote MCP server using the command 'claude mcp add --transport http manypi https://mcp.manypi.com/mcp -s user'. This allows the agent to execute tools provided by the ManyPI service.
- [EXTERNAL_DOWNLOADS]: The skill references and downloads configuration or tools from 'mcp.manypi.com', which is an external resource associated with the recognized vendor ManyPI.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from untrusted external sources, specifically trade association member directories. This presents an attack surface where malicious instructions embedded in those directories could influence the agent's behavior.
Audit Metadata