poteto-help
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes information from other skill files and documentation stored in the author's GitHub repository. While this creates an ingestion surface for potential instructions within those files, it is the primary intended function of a help-oriented skill. Evidence: Ingestion points include local sibling skills and remote documentation at github.com/mdsmithaustin/pstack; Boundary markers are not explicitly defined; Capabilities are limited to reading and responding to user queries; Sanitization is not specifically implemented beyond the platform's standard guardrails.
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from the author's public repository on GitHub (github.com/mdsmithaustin/pstack) when local files are unavailable. These resources are identified as vendor-owned infrastructure and are used strictly for retrieving help content.
Audit Metadata