typo3-typoscript-ref
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches TYPO3 documentation from official repositories on GitHub belonging to the TYPO3 and TYPO3-Documentation organizations. These sources are considered well-known and trusted for the purpose of technical documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes reStructuredText (RST) documentation from external repositories, converting it to Markdown for inclusion in the agent's context. This presents a potential surface for indirect prompt injection if the source documentation were to be compromised.
- Ingestion points: Documentation files are downloaded from external GitHub repositories using the
scripts/fetch-docs.shscript. - Boundary markers: The
scripts/lookup.shscript provides basic boundary markers by prefixing output with file path headers (e.g.,--- filename ---). - Capability inventory: The skill possesses capabilities for file system writing (caching), network access (via GitHub CLI), and execution of Python scripts for content transformation.
- Sanitization: The transformation script
scripts/rst2md.pystrips several RST directives but does not perform specific sanitization of the text content against malicious instructions. - [COMMAND_EXECUTION]: The skill implements its functionality through shell scripts and Python. It performs input validation for major version strings and searches for local project configuration files. It uses
python3 -cfor lightweight data processing, such as parsing JSON and YAML configuration.
Audit Metadata