tech-stack-detector
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process data from external websites to identify technology stacks, which is a standard surface for indirect prompt injection.\n
- Ingestion points: Data retrieved from external targets via the
strale_tech_stack_detectandstrale_company_tech_stacktools in SKILL.md.\n - Boundary markers: The instructions do not specify the use of delimiters to isolate external data from the agent's instructional context.\n
- Capability inventory: The skill utilizes
sandbase_call_toolto interact with external detection services.\n - Sanitization: No explicit sanitization or input validation for external data is mentioned in the workflow.
Audit Metadata