fidibo
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
fidibo-mcppackage using theuvxtool. This is a standard procedure for MCP-based skills but involves downloading and executing code from an external registry. - [INDIRECT_PROMPT_INJECTION]: The
fd_reviewstool retrieves reader reviews from an external source. This content is untrusted and could potentially contain instructions aimed at influencing the agent's behavior. - Ingestion points: Book reviews fetched via
fd_reviewsinSKILL.md. - Boundary markers: None specified in the instructions.
- Capability inventory: The skill provides search and metadata retrieval capabilities; no filesystem or network-level write capabilities are present.
- Sanitization: No explicit sanitization or filtering of review content is described.
Audit Metadata