malware-analysis-warning
Warn
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: MEDIUMMETADATA_POISONINGINDIRECT_PROMPT_INJECTION
Full Analysis
- [METADATA_POISONING]: The skill body attributes authorship to 'ara.so', which contradicts the provided developer context 'reason-machines'. This metadata inconsistency is deceptive regarding the skill's origin.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and evaluate untrusted data related to software repositories (names, descriptions, and topics).
- Ingestion points: Repository metadata and names provided via user triggers.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the processed repository data.
- Capability inventory: No active tools, network execution functions, or file-write capabilities are defined in the skill's current scope.
- Sanitization: There are no mechanisms described for sanitizing or escaping the content retrieved from external repository sources.
Audit Metadata