ap2-dispute-accountability
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to fetch documentation from external URLs and perform web searches to guide the implementation of dispute handling systems. This creates a surface for indirect prompt injection if the external sources contain malicious instructions. * Ingestion points: The skill specifies fetching content from ap2-protocol.org URLs and web search results as instructed in SKILL.md. * Boundary markers: The skill does not provide delimiters or instructions for the agent to ignore potential commands embedded in the external content. * Capability inventory: The skill has access to Write, Edit, and Bash tools as defined in the frontmatter of SKILL.md, which could be leveraged if the agent follows malicious instructions from the ingested data. * Sanitization: No sanitization or validation of the fetched content is specified.
- [EXTERNAL_DOWNLOADS]: The skill fetches implementation details and specifications from ap2-protocol.org.
Audit Metadata