api-use-external
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to handle and process data from external API sources, creating a potential surface for indirect prompt injection.
- Ingestion points: Data retrieved from external HTTP GET and POST requests as indicated in the SKILL.md description.
- Boundary markers: No specific delimiters or instructions to ignore embedded commands in API responses are provided.
- Capability inventory: The skill guidance involves performing network queries and integration logic (SKILL.md).
- Sanitization: There are no explicit instructions for sanitizing or validating external data before it is interpreted by the agent.
Audit Metadata