Skills
Navigate
skills/ortus-boxlang/bx-sites-skills/bx-sites-actions/Gen Agent Trust Hub

bx-sites-actions

Pass

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data by instructing the agent to fetch and analyze GitHub Actions logs using the get_job_logs tool. These logs constitute untrusted input that could be manipulated by an attacker to include hidden instructions.
  • Ingestion points: Workflow run logs retrieved through the get_job_logs tool (SKILL.md).
  • Boundary markers: There are no instructions for the agent to use delimiters or ignore embedded instructions within the fetched logs.
  • Capability inventory: The agent is authorized to use actions_run_trigger to rerun or cancel workflows, and actions_list to query repository state.
  • Sanitization: The skill lacks requirements for sanitizing or escaping the content retrieved from the logs before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 26, 2026, 05:02 PM