gillby-water
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes real-time weather and marine data from external endpoints, creating an attack surface for indirect prompt injection.
- Ingestion points: Data is fetched from gillby.com via several tool calls (e.g.,
get_conditions). - Boundary markers: The skill does not provide specific delimiters to separate API data from instructions.
- Capability inventory: The skill possesses read/write capabilities for personal trip and vessel data when OAuth is provided.
- Sanitization: There are no instructions to sanitize or validate the content of the API responses.
Audit Metadata