netlify-caching
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions the installation of the
@netlify/cachelibrary, which is a standard package from a well-known service provider used to enable caching functionality in code. - [INDIRECT_PROMPT_INJECTION]: The skill provides documentation for handling untrusted HTTP request data (such as URL components, query parameters, and headers) combined with network and caching capabilities. This represents a potential attack surface for indirect prompt injection if user-controlled content is processed by an agent without proper isolation.
- Ingestion points: Request data processed within Netlify Functions and Edge Functions as documented in SKILL.md.
- Boundary markers: The provided code examples do not include explicit delimiters or instructions to the model to ignore embedded commands in the processed headers or query strings.
- Capability inventory: The skill documentation includes network capabilities (
fetch), cache invalidation APIs (purgeCache), and cache storage operations (cache.put). - Sanitization: Input validation or sanitization is not explicitly demonstrated in the examples, as the skill focus is on the caching logic rather than input security.
Audit Metadata