skill-seekers
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content from documentation websites, GitHub repositories, and PDF files, which introduces a risk of indirect prompt injection where malicious instructions embedded in those sources could be executed by the agent. * Ingestion points: Specifically identifies websites, GitHub repositories, and PDFs as input sources in the skill description. * Boundary markers: The instructions do not define delimiters or provide guidance to the agent to ignore instructions found within the processed content. * Capability inventory: No executable scripts or tool definitions are present in the skill files. * Sanitization: There is no evidence of sanitization, filtering, or validation of the input data.
- [NO_CODE]: The skill consists solely of descriptive markdown and does not contain any executable scripts, shell commands, or binaries, which minimizes the direct attack surface.
Audit Metadata