landing-page-design
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references external installation instructions for the
infshCLI tool via a public GitHub repository. This is used to set up the environment required for the skill's functionality. - [COMMAND_EXECUTION]: The skill uses the
infshCLI tool throughBashto perform operations such as logging in, running AI models (e.g.,falai/flux-dev-lora), and querying search providers. It also suggests usingnpxto install supplementary skills from theinference-shregistry. - [PROMPT_INJECTION]: The skill incorporates a surface for indirect prompt injection by processing external data from search assistants.
- Ingestion points: External data is ingested through
infsh app run tavily/search-assistantandinfsh app run exa/answer(as seen in SKILL.md). - Boundary markers: No specific delimiters or boundary instructions are provided to the agent for handling the untrusted search output.
- Capability inventory: The skill possesses the capability to execute
infshshell commands viaBash. - Sanitization: No sanitization or validation mechanisms are described for the data retrieved from external search services before it is used to influence agent decisions.
Audit Metadata