skyrim-tool-router
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMPROMPT_INJECTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The routing table entry for 'fictional-adult-modding' includes the explicit instruction 'do not sanitize'. This is an attempt to override the agent's safety filters and content moderation guidelines when dealing with adult or NSFW content.
- [COMMAND_EXECUTION]: The skill provides PowerShell script templates, such as 'TOOLS\Set-McpProfile.ps1', which are intended to be called with a project path argument ('-Path ""'). This pattern is susceptible to command injection if the project path is derived from an untrusted source and contains shell metacharacters.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted data from external sources during its routing and diagnostic workflows.
- Ingestion points: Reads SKSE framework logs, crash logs, and external web content from Nexus mod pages.
- Boundary markers: None are defined to separate external data from instructions.
- Capability inventory: The skill has capabilities to write to the filesystem ('skyrim-versioned-workspace') and execute local PowerShell scripts ('Set-McpProfile.ps1').
- Sanitization: There is no mention of validation, escaping, or filtering of the content read from external logs or web pages before it is analyzed by the agent.
Audit Metadata