technolife
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions advise the user to install a third-party tool
technolife-mcpusinguvx. This represents a dependency on an external package not provided by a recognized trusted organization. - [INDIRECT_PROMPT_INJECTION]: The skill acts as an interface for external e-commerce data, creating a surface for indirect prompt injection attacks where malicious content in product reviews or site data could influence the agent's behavior.
- Ingestion points: The skill uses tools such as
tl_reviews,tl_search,tl_store_info, andtl_faqto retrieve content from external APIs. - Boundary markers: There are no instructions provided to the agent to use delimiters or ignore embedded instructions within the fetched data.
- Capability inventory: The skill allows for searching, product comparison, and location lookups, providing a context where external data is presented to the user.
- Sanitization: The instructions do not include any guidance for sanitizing or validating the data retrieved from external sources before processing or displaying it.
Audit Metadata