salla-docs
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill facilitates access to official Salla platform documentation. All provided references point to the vendor's primary documentation domain, and the instructions are focused on retrieving technical specifications for app development.- [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch markdown and OpenAPI specification files from docs.salla.dev. This behavior is required to ensure the agent uses the most current API contracts and documentation.- [INDIRECT_PROMPT_INJECTION]: As the skill ingests external content from documentation pages, it technically possesses an indirect prompt injection surface. However, since the source is the official vendor documentation (docs.salla.dev), the risk is minimal and associated with the skill's primary function of information retrieval.
- Ingestion points: URL fetches of documentation pages from docs.salla.dev (referenced in SKILL.md and references/docs-map.md).
- Boundary markers: None explicitly defined in the instructions for the external content.
- Capability inventory: No local scripts or subprocess execution; the skill relies on the agent's native network and read capabilities.
- Sanitization: Content is fetched for documentation purposes; no specific sanitization or escaping is performed on the retrieved text.
Audit Metadata