maktabkhooneh
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions suggest installing the
maktabkhooneh-mcppackage usinguvx. This package is the primary source of the skill's capabilities and is hosted on a public registry.\n- [INDIRECT_PROMPT_INJECTION]: The skill retrieves untrusted data from an external platform, which could potentially contain malicious instructions.\n - Ingestion points: The
mkh_reviewsandmkh_coursetools ingest user-generated reviews and course descriptions from Maktabkhooneh.\n - Boundary markers: The skill does not implement specific delimiters or instructions to ignore instructions embedded within the fetched data.\n
- Capability inventory: All tools provided are read-only (mkh_search, mkh_browse, mkh_course, etc.) and do not have access to the file system or sensitive environment variables.\n
- Sanitization: No sanitization process for the ingested text is mentioned in the skill definition.
Audit Metadata