taaghche
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions prompt the user to install the
taaghche-mcppackage usinguvx. This involves downloading and executing code from the Python Package Index (PyPI), a third-party repository. - [INDIRECT_PROMPT_INJECTION]: The skill fetches untrusted data from an external source that could be used to influence the agent's behavior.
- Ingestion points: The
tg_reviewstool retrieves reader-submitted reviews fromtaaghche.com(SKILL.md). - Boundary markers: No specific boundary markers or instructions to ignore embedded commands are defined for the data returned by the tools (SKILL.md).
- Capability inventory: The skill possesses extensive metadata retrieval capabilities including searching, browsing, and author/publisher profile access (SKILL.md).
- Sanitization: No sanitization or filtering of the external website content is described (SKILL.md).
Audit Metadata