verify
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process data from untrusted external sources, creating a vulnerability surface where malicious content from a website or API could influence agent behavior.
- Ingestion points: The skill explicitly directs the agent to ingest data from browser pages, API endpoints, command outputs, and third-party provider dashboards (such as Stripe, Convex, Cloudflare, and Lumail) as documented in SKILL.md.
- Boundary markers: The instructions lack specific guidance for the agent to use delimiters or ignore instructions that might be embedded within the external content being verified.
- Capability inventory: Based on the instructions, the agent is expected to utilize browser automation, network request tools, and shell command execution to perform its verification tasks.
- Sanitization: There are no requirements for sanitizing, escaping, or validating the data retrieved from external surfaces before the agent processes and reasons about it.
Audit Metadata