foragent-call
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to a third-party domain (foragent.io) to download a desktop application and a 'Remote connection' plugin. It specifically mentions the installation of a 'ForAgent Notifier' utility on macOS systems.
- [INDIRECT_PROMPT_INJECTION]: The skill establishes a workflow where the agent must process 'one-time codes', 'call instructions', and 'setup messages' generated by an external application.
- Ingestion points: The agent is instructed in SKILL.md to ingest data provided by the ForAgent application.
- Boundary markers: There are no boundary markers or delimiters provided to signal that the pasted content should be treated as untrusted data.
- Capability inventory: The skill facilitates message exchange and 25MB file transfers between agents.
- Sanitization: No validation or sanitization of the external input is specified.
- [COMMAND_EXECUTION]: The 'setup message' is described as something that 'configures the ForAgent plugin... automatically', which implies the execution of configuration commands or scripts provided by the external third-party service.
Audit Metadata