skills/sepehr071/iran-mcp/technolife/Gen Agent Trust Hub

technolife

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructions advise the user to install a third-party tool technolife-mcp using uvx. This represents a dependency on an external package not provided by a recognized trusted organization.
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as an interface for external e-commerce data, creating a surface for indirect prompt injection attacks where malicious content in product reviews or site data could influence the agent's behavior.
  • Ingestion points: The skill uses tools such as tl_reviews, tl_search, tl_store_info, and tl_faq to retrieve content from external APIs.
  • Boundary markers: There are no instructions provided to the agent to use delimiters or ignore embedded instructions within the fetched data.
  • Capability inventory: The skill allows for searching, product comparison, and location lookups, providing a context where external data is presented to the user.
  • Sanitization: The instructions do not include any guidance for sanitizing or validating the data retrieved from external sources before processing or displaying it.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 05:31 AM