setup-template
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external source (
docs.phatysd.me) in both Markdown and JSON formats during the template discovery phase. This data is used to match project evidence and generate a recommendation. - Ingestion points: Template metadata and authored guidance are fetched from
https://docs.phatysd.me/content/:slug/markdownandhttps://docs.phatysd.me/content/:slug/json. - Boundary markers: The skill contains a dedicated 'Research boundaries' section and mandates that a recommendation is always a 'Proposal' until the user explicitly confirms it. It also requires validation of representations to ensure identity consistency.
- Capability inventory: The agent can read local documentation (
AGENTS.md,docs/requirement.md,CONTEXT.md) and has the capability to update theCONTEXT.mdfile after receiving user confirmation. It also performs network operations to fetch template data. - Sanitization: The instructions explicitly forbid generating production code, creating prototypes, or invoking downstream skills based on the research. It treats external content as read-only research input.
- [EXTERNAL_DOWNLOADS]: The skill is designed to fetch content from
docs.phatysd.me. These network operations are necessary for the skill's primary function of researching published templates from the vendor's library.
Audit Metadata