examples
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill retrieves and reads external demo source code via the
mcp__pmndrs__get_exampletool andexamples://indexresource. This creates an attack surface where untrusted content could contain instructions to influence the agent's behavior. - Ingestion points:
ReadMcpResourceTool(index) andmcp__pmndrs__get_example(source code). - Boundary markers: No delimiters or specific instructions to ignore embedded commands are specified when processing the external content.
- Capability inventory: The agent analyzes and explains the retrieved source code to the user.
- Sanitization: No sanitization is performed on the source code retrieved from the external repository.
- [COMMAND_EXECUTION]: The skill provides the agent with a template command to provide to users for downloading project assets.
- Evidence:
npx degit pmndrs/examples/examples/{name}inSKILL.md. - Note: The command is intended for manual execution by the user and refers to the author's
pmndrs/examplesrepository.
Audit Metadata