skills/nha-in/docs/uhi-ambulance/Gen Agent Trust Hub

uhi-ambulance

Pass

Audited by Gen Agent Trust Hub on Oct 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs users to clone the 'Header Generation Utility' from the official UHA-ABDM GitHub repository at https://github.com/NHA-ABDM/UHI/tree/main/header_generator_utility. This is a standard part of the UHI onboarding process for generating security-compliant headers.
  • [COMMAND_EXECUTION]: The skill provides several curl command templates for testing search and initialization operations against the UHI Gateway sandbox (https://uhigatewaysandbox.abdm.gov.in). These templates use placeholders for sensitive authentication headers and identifiers.
  • [INDIRECT_PROMPT_INJECTION]: The skill has a functional surface for indirect prompt injection as it is designed to analyze and debug external API responses and error objects supplied by the user during the development process.
  • Ingestion points: Technical files like references/debug.md instruct the agent to interpret UHI error objects and catalog responses (on_search, on_init).
  • Boundary markers: The skill does not implement specific delimiters for the external content it is asked to analyze.
  • Capability inventory: The agent has access to shell tools (curl) provided in the integration examples.
  • Sanitization: No specific prompt sanitization or escaping instructions are provided for the agent's processing of user-supplied API data.
  • [NO_CODE]: The skill consists exclusively of Markdown documentation and does not ship with any executable scripts or binary files.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 9, 2026, 09:48 AM