skills/sepehr071/iran-mcp/banimode/Gen Agent Trust Hub

banimode

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions recommend installing and executing an external package called banimode-mcp using the uvx tool from a public package registry.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external fashion listings, product features, and customer reviews, which could potentially contain instructions aimed at influencing the agent's behavior.
  • Ingestion points: Data retrieved by the bm_search, bm_browse, bm_product, and bm_reviews tools mentioned in SKILL.md.
  • Boundary markers: The instructions do not specify any delimiters or warnings to ignore embedded content within the retrieved data.
  • Capability inventory: The skill performs network requests to fetch external fashion data and user-generated reviews.
  • Sanitization: There is no mention of sanitization or filtering for the external content before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:31 AM