render-background-workers
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses a documentation-retrieval workflow to fetch updated Markdown files from the official Render domain (render.com). This ensures the agent is working with the most recent platform specifications.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an ingestion surface by instructing the agent to fetch and process external documentation from Render's official website. 1. Ingestion points: Documentation fetch instructions in SKILL.md and multiple reference files (deployments.md, private-networking.md, service-types.md). 2. Boundary markers: No specific delimiters are used to isolate fetched content. 3. Capability inventory: The skill allows the creation and execution of Render Blueprints containing shell-based build and start commands. 4. Sanitization: No sanitization is performed on the retrieved text. 5. Note: This ingestion surface is considered low risk as it targets the trusted vendor's own documentation.
Audit Metadata