Skills
Navigate
skills/microck/opendots-microck/python-resource-management/Gen Agent Trust Hub

python-resource-management

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for streaming and accumulating data from external sources, which constitutes a vulnerability surface for indirect prompt injection if that data contains malicious instructions.
  • Ingestion points: The skill utilizes response.iter_content() in the stream_with_accumulation function (Pattern 6) and stream_with_metrics function (Pattern 8) in SKILL.md.
  • Boundary markers: The provided code snippets do not implement boundary markers or instructions for the agent to disregard instructions embedded within the processed stream data.
  • Capability inventory: The skill includes logic for database operations using psycopg and asyncpg, as well as file system operations like open() and Path.unlink() in SKILL.md.
  • Sanitization: There is no evidence of input validation, filtering, or escaping for the external content being streamed and accumulated.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 01:00 PM