banimode
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions recommend installing and executing an external package called
banimode-mcpusing theuvxtool from a public package registry. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external fashion listings, product features, and customer reviews, which could potentially contain instructions aimed at influencing the agent's behavior.
- Ingestion points: Data retrieved by the
bm_search,bm_browse,bm_product, andbm_reviewstools mentioned inSKILL.md. - Boundary markers: The instructions do not specify any delimiters or warnings to ignore embedded content within the retrieved data.
- Capability inventory: The skill performs network requests to fetch external fashion data and user-generated reviews.
- Sanitization: There is no mention of sanitization or filtering for the external content before it is processed by the agent.
Audit Metadata