async-python-patterns
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides code patterns for web scraping that retrieve data from external URLs, creating an ingestion surface for untrusted content.
- Ingestion points: External data enters the context via
aiohttp.ClientSession.get()calls in the provided implementation examples inresources/implementation-playbook.md. - Boundary markers: The code samples are generic and do not include specific delimiters or instructions to ignore potential commands embedded within the scraped content.
- Capability inventory: The skill facilitates network access and data retrieval capabilities.
- Sanitization: The implementation playbook includes a response body size limit (1 MiB) as a basic form of data sanitization to prevent large payload attacks.
- [EXTERNAL_DOWNLOADS]: The documentation and implementation guide reference several well-known external Python libraries, including
aiohttp,FastAPI,asyncpg,motor, andpytest-asyncio.
Audit Metadata