octen-extract
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes content from arbitrary external URLs, which creates a surface for indirect prompt injection attacks where malicious instructions on a web page could attempt to influence agent behavior.\n
- Ingestion points: Untrusted content is ingested from the URLs specified in the
urlsparameter as defined in SKILL.md.\n - Boundary markers: The instructions do not define specific delimiters or instructions to treat the external content as data rather than instructions.\n
- Capability inventory: The skill uses
curlto interact with the Octen API atapi.octen.ai.\n - Sanitization: No specific sanitization or filtering of the extracted content is described before it is provided to the agent.\n- [COMMAND_EXECUTION]: The skill utilizes the
curlutility to perform HTTP POST requests to theapi.octen.aiendpoint. This is a standard implementation for interacting with external APIs and is consistent with the skill's stated purpose.
Audit Metadata