skillkit
Pass
Audited by Gen Agent Trust Hub on Aug 24, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches user-supplied URLs to obtain structure ideas, which presents a surface for malicious content to influence the agent's instructions.
- Ingestion points: User-provided links are processed via
WebFetchduring Step 1 (SKILL.md). - Boundary markers: There are no instructions to use delimiters or ignore instructions found within the fetched content.
- Capability inventory: The skill possesses
Edit,Write, andBashcapabilities. - Sanitization: The skill lacks logic to sanitize or verify external content before processing.
Audit Metadata