devsecops-free-discovery
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the README documentation from the well-known
ripienaar/free-for-devrepository on GitHub. This is a standard informational request for infrastructure discovery. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external source, which represents a potential attack surface.
- Ingestion points: Step 2 fetches raw markdown content from
https://raw.githubusercontent.com/ripienaar/free-for-dev/master/README.md. - Boundary markers: The skill does not specify delimiters or instructions to ignore embedded commands within the fetched content.
- Capability inventory: The skill is scoped to informational parsing and categorization; it does not include file-write, command execution, or network exfiltration capabilities.
- Sanitization: No sanitization or validation of the remote markdown content is described.
Audit Metadata