directory-submissions
Fail
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: CRITICALEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The files 'references/directory-list.md' and 'references/submission-tracker-template.csv' contain the URL 'https://fitprofessionals.net', which is currently blacklisted and flagged as malicious by security scanners. Guiding users or agents to interact with known malicious domains constitutes a high-risk security vulnerability.
- [COMMAND_EXECUTION]: The workflow in 'SKILL.md' (Step 4) directs the agent to verify backlinks using 'curl -sIL' on URLs sourced from the directory lists or provided by the user. The instructions lack any requirement for URL sanitization or validation, making the system vulnerable to shell command injection (e.g., using metacharacters in the URL) and SSRF.
- [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill is designed to automatically ingest product marketing context from files such as '.agents/product-marketing.md' or '.claude/product-marketing.md'.
- Boundary markers: There are no instructions to use delimiters or ignore embedded commands when reading this external data.
- Capability inventory: The skill has access to shell command execution (curl) and file-system read capabilities.
- Sanitization: No sanitization, validation, or escaping logic is applied to the ingested marketing context or the URLs used in network commands.
Recommendations
- CRITICAL: 2 file(s) identified as malware by FileRep - DO NOT USE
- AI detected serious security threats
- Contains 1 malicious URL(s) - DO NOT USE
Audit Metadata