paziresh24
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
paziresh24-mcppackage usinguvx. This is an external dependency that provides the underlying tool implementation.- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from an external website (Paziresh24.com) via tools that fetch profiles, reviews, and FAQs. - Ingestion points: Untrusted data enters the context via the
pz_doctor,pz_reviews,pz_center, andpz_faqtools. - Boundary markers: There are no explicit instructions to use delimiters or warnings for the agent to ignore embedded instructions in the fetched data.
- Capability inventory: The skill is strictly read-only and lacks capabilities for file system modifications, arbitrary shell execution, or sensitive credential access.
- Sanitization: The instructions do not specify any sanitization or validation logic for the content retrieved from the external API.
Audit Metadata