factchat-gateway
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a code template for a Next.js Route Handler that interpolates untrusted user input directly into a summary prompt. This creates a surface where a malicious user could provide input designed to override the agent's instructions.
- Ingestion points:
app/api/ai/route.ts(retrievestextfromreq.json()) - Boundary markers: Absent; input is appended after a newline.
- Capability inventory: Performs a network request via the OpenAI SDK to a remote gateway.
- Sanitization: None; raw input is used in the template literal.
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install the
openaipackage from the official NPM registry, which is a standard industry library. - [COMMAND_EXECUTION]: The instructions include a
curlcommand template for users to manually query available models from the vendor's API gateway (factchat-cloud.mindlogic.ai). This is a legitimate documentation pattern for API interaction.
Audit Metadata