openfootball
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches football match data in JSON format from the openfootball organization's official GitHub repositories and GitHub Pages mirror.
- [INDIRECT_PROMPT_INJECTION]: The skill processes match data retrieved from external URLs, creating a surface for indirect prompt injection. 1. Ingestion points: Match fixtures and results fetched from raw.githubusercontent.com/openfootball/football.json and openfootball.github.io. 2. Boundary markers: No specific delimiters or warnings are provided for the fetched JSON content. 3. Capability inventory: The skill uses tools like curl, wget, python, and node to fetch and process match data. 4. Sanitization: No explicit sanitization or filtering of the remote JSON content is described beyond standard JSON parsing.
Audit Metadata