developer-marketing-jobs-board
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides numerous examples for fetching data from the raw GitHub content of the 'Infrasity-Labs/developer-marketing-jobs' repository and instructions for cloning the repository via 'git clone'.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and parse markdown data from an external GitHub repository. This creates a surface where instructions embedded in the job listings or repository content could influence the agent's behavior during processing.
- Ingestion points: README.md content fetched from 'https://raw.githubusercontent.com/Infrasity-Labs/developer-marketing-jobs/main/README.md'.
- Boundary markers: Absent; the provided code templates parse the data using string splitting and regex without explicit delimiters to separate content from instructions.
- Capability inventory: The skill uses network operations (curl, git, requests, axios) and file system interactions (cat, grep, local file writes).
- Sanitization: The provided Python and Node.js templates use regex and basic string manipulation to extract specific fields, which provides some structural validation but does not sanitize the text content itself.
Audit Metadata