a2a-jsonrpc-transport
Pass
Audited by Gen Agent Trust Hub on Mar 31, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches technical documentation from
a2a-protocol.organdjsonrpc.org. These are legitimate documentation sources for the protocols the skill is designed to handle and are used for information purposes rather than direct execution. - [INDIRECT_PROMPT_INJECTION]: The skill processes external documentation, creating a potential surface for indirect injection.
- Ingestion points: Documentation is fetched from
a2a-protocol.org,jsonrpc.org, and GitHub (SKILL.md). - Boundary markers: None present. The instructions do not define clear boundaries or specify to ignore instructions within the fetched data.
- Capability inventory: The skill possesses the ability to
Write,Edit, and useBashto implement the protocol layers (SKILL.md). - Sanitization: No sanitization or content validation is specified for the retrieved documentation.
Audit Metadata