search-first
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for the agent to ingest and process data from external, untrusted sources including GitHub repositories, package registries (NPM, PyPI), and academic databases. This introduces an inherent surface for indirect prompt injection if external content contains malicious instructions. The skill mitigates this risk by defining a rigorous 'Evaluate' step that scores candidates on functionality, community maintenance, and license before any code adoption or execution occurs.
Audit Metadata