httpx
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documents the use of a well-known, legitimate Python HTTP library (httpx). All code snippets are educational and do not contain malicious instructions or hardcoded credentials.
- [COMMAND_EXECUTION]: The skill documents standard pip install commands for installing the library and its optional dependencies from public registries.
- [DATA_EXFILTRATION]: While the skill enables network operations, it does so through standard HTTP client functionality. No evidence of unauthorized data collection or exfiltration of sensitive local files was found.
- [INDIRECT_PROMPT_INJECTION]: This skill presents an attack surface by ingesting external HTTP response data (SKILL.md) and possesses capabilities for network and file system access (SKILL.md). No specific boundary markers or sanitization logic are included in the provided snippets, which is expected for general library documentation.
Audit Metadata