uhi-ambulance
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to clone the 'Header Generation Utility' from the official UHA-ABDM GitHub repository at
https://github.com/NHA-ABDM/UHI/tree/main/header_generator_utility. This is a standard part of the UHI onboarding process for generating security-compliant headers. - [COMMAND_EXECUTION]: The skill provides several
curlcommand templates for testing search and initialization operations against the UHI Gateway sandbox (https://uhigatewaysandbox.abdm.gov.in). These templates use placeholders for sensitive authentication headers and identifiers. - [INDIRECT_PROMPT_INJECTION]: The skill has a functional surface for indirect prompt injection as it is designed to analyze and debug external API responses and error objects supplied by the user during the development process.
- Ingestion points: Technical files like
references/debug.mdinstruct the agent to interpret UHI error objects and catalog responses (on_search,on_init). - Boundary markers: The skill does not implement specific delimiters for the external content it is asked to analyze.
- Capability inventory: The agent has access to shell tools (
curl) provided in the integration examples. - Sanitization: No specific prompt sanitization or escaping instructions are provided for the agent's processing of user-supplied API data.
- [NO_CODE]: The skill consists exclusively of Markdown documentation and does not ship with any executable scripts or binary files.
Audit Metadata