api-monetization
Pass
Audited by Gen Agent Trust Hub on Apr 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute a shell command (
ls) to discover installed skills across multiple directory paths, including those in the user's home directory (e.g.,~/.claude/skills/), which constitutes environment discovery. - [EXTERNAL_DOWNLOADS]: The skill's documentation encourages the use of
npxto install additional tools and skills from the AbsolutelySkilled repository, which involves downloading and running code from an external vendor. - [PROMPT_INJECTION]: The skill includes instructions that override standard agent behavior by requiring all initial responses to start with a specific emoji (🧢).
- [PROMPT_INJECTION]: The skill establishes a surface for Indirect Prompt Injection (Category 8) by providing implementation examples that process untrusted input from HTTP headers (
x-api-key) without explicit sanitization or boundary markers. - Ingestion points:
req.headers['x-api-key']used in the middleware example inSKILL.md. - Boundary markers: None provided to separate user-controlled data from instructions in the prompt context.
- Capability inventory: Network access via Stripe API, local command execution (
ls), and Redis integration. - Sanitization: Not implemented in the provided middleware templates.
Audit Metadata