paragraph-api

Pass

Audited by Gen Agent Trust Hub on May 4, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Recommends installation of the official @paragraph-com/sdk package from the npm registry for developers using TypeScript.- [COMMAND_EXECUTION]: Provides documented curl command patterns for interacting with the Paragraph REST API endpoints.- [DATA_EXFILTRATION]: Communicates with public.api.paragraph.com for legitimate content management tasks. These operations are directed to the vendor's official API infrastructure.- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface where external data is ingested. Evidence chain: 1. Ingestion points: Remote API responses for posts, publications, and search results (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Write, WebFetch, and Bash tools (SKILL.md). 4. Sanitization: Absent. Risk is mitigated by explicit working agreements requiring user approval before any publishing or newsletter dispatch actions.
Audit Metadata
Risk Level
SAFE
Analyzed
May 4, 2026, 09:25 PM