parallel-chunked-download
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides logic for downloading content from external URLs and writing it to the local filesystem, creating a surface for untrusted data ingestion.
- Ingestion points: The
urlparameter in thedownloadfunction (SKILL.md). - Boundary markers: None are present in the provided code snippet.
- Capability inventory: The skill performs network requests and writes to the local filesystem.
- Sanitization: No URL validation or content sanitization is included in the template code.
- [SAFE]: The logic for chunked downloading and the bash auditing commands follow standard development practices. There are no indications of prompt injection, hardcoded credentials, or malicious remote code execution.
Audit Metadata