otaghak
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
otaghak-mcppackage usinguvx. This package is a resource associated with the skill's author, anduvxis a well-known tool from Astral for managing Python-based command-line utilities. - [INDIRECT_PROMPT_INJECTION]: The skill retrieves and processes data from external sources, presenting a vulnerability surface for indirect prompt injection.
- Ingestion points: Content is ingested from Otaghak.com via tools such as
ot_reviews(user reviews),ot_travel_guide(destination guides), andot_help(FAQ and terms). - Boundary markers: The skill does not define specific delimiters or instructions to help the agent distinguish between its core instructions and ingested content.
- Capability inventory: The tools provided are limited to read-only network operations for site data. No capabilities for file system modification, command execution, or other high-privilege operations were found.
- Sanitization: There is no evidence of sanitization or filtering being applied to the external data before it is processed by the agent.
Audit Metadata