asalbanoo
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
asalbanoo-mcppackage using theuvxtool. This package is retrieved from the public Python Package Index (PyPI). As this is a vendor-owned resource specifically designed for the skill's functionality, it is documented as a standard dependency. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves product descriptions, blog posts, and customer reviews from an external website (asalbanooshop.com). This creates an ingestion surface where untrusted third-party content is brought into the agent's context, potentially allowing for indirect prompt injection if the source website content is compromised.
Audit Metadata