typo3-typoscript-ref

Pass

Audited by Gen Agent Trust Hub on Oct 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches TYPO3 documentation from official repositories on GitHub belonging to the TYPO3 and TYPO3-Documentation organizations. These sources are considered well-known and trusted for the purpose of technical documentation.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes reStructuredText (RST) documentation from external repositories, converting it to Markdown for inclusion in the agent's context. This presents a potential surface for indirect prompt injection if the source documentation were to be compromised.
  • Ingestion points: Documentation files are downloaded from external GitHub repositories using the scripts/fetch-docs.sh script.
  • Boundary markers: The scripts/lookup.sh script provides basic boundary markers by prefixing output with file path headers (e.g., --- filename ---).
  • Capability inventory: The skill possesses capabilities for file system writing (caching), network access (via GitHub CLI), and execution of Python scripts for content transformation.
  • Sanitization: The transformation script scripts/rst2md.py strips several RST directives but does not perform specific sanitization of the text content against malicious instructions.
  • [COMMAND_EXECUTION]: The skill implements its functionality through shell scripts and Python. It performs input validation for major version strings and searches for local project configuration files. It uses python3 -c for lightweight data processing, such as parsing JSON and YAML configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 28, 2026, 12:55 PM