code-engine

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill establishes patterns for ingesting untrusted data (function parameters) and transmitting them via domo.post to a remote execution environment (Domo Code Engine).
  • Ingestion points: The payload object in the executeFunction and params in domo.post calls within SKILL.md are used to pass data to remote functions.
  • Boundary markers: The provided templates do not specify delimiters or instructions to prevent embedded instructions in the payload from being executed by the remote Code Engine function.
  • Capability inventory: The skill utilizes domo.post for network operations and references package execution.
  • Sanitization: The instruction set focuses on response normalization (unwrapping envelopes) but does not include patterns for sanitizing or validating input data before it is sent to the external service.
  • [EXTERNAL_DOWNLOADS]: The skill references the installation of ryuu.js via npm. This is the standard development SDK for the Domo platform and is considered a well-known service.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 06:16 PM