skills/sepehr071/iran-mcp/otaghak/Gen Agent Trust Hub

otaghak

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the otaghak-mcp package using uvx. This package is a resource associated with the skill's author, and uvx is a well-known tool from Astral for managing Python-based command-line utilities.
  • [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from external sources, presenting a vulnerability surface for indirect prompt injection.
  • Ingestion points: Content is ingested from Otaghak.com via tools such as ot_reviews (user reviews), ot_travel_guide (destination guides), and ot_help (FAQ and terms).
  • Boundary markers: The skill does not define specific delimiters or instructions to help the agent distinguish between its core instructions and ingested content.
  • Capability inventory: The tools provided are limited to read-only network operations for site data. No capabilities for file system modification, command execution, or other high-privilege operations were found.
  • Sanitization: There is no evidence of sanitization or filtering being applied to the external data before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:31 AM