lxmfy
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches live documentation and topic data from the vendor-controlled domain
lxmfy.quad4.io. These network operations are restricted to the official host and are used to provide up-to-date framework information to the agent. - [INDIRECT_PROMPT_INJECTION]: The skill contains ingestion surfaces that could allow instructions embedded in processed data to influence the agent:
- Ingestion points: The
diagnose_bottool processes user-provided bot source code (up to 64 KiB) for static analysis, and thesearch_docstool accepts arbitrary query strings. - Boundary markers: The instructions do not define specific delimiters or "ignore embedded instructions" warnings for the diagnostic or search tools.
- Capability inventory: The skill allows network reads from allowlisted vendor domains and file analysis, though it maintains a read-only policy regarding its own operations.
- Sanitization: There is no mention of explicit sanitization or filtering logic for the input strings passed to the search or diagnostic tools.
Audit Metadata