fileset-api
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The content is strictly instructional and provides legitimate code snippets for interacting with a platform API.
- [COMMAND_EXECUTION]: The skill includes JavaScript examples for file operations (upload, download, delete) using the standard fetch API. These operations are restricted to the platform's API namespace (/api/files/v1/).
- [INDIRECT_PROMPT_INJECTION]: The documentation mentions AI-powered document querying. While the processing of user-uploaded files via LLMs can be a vector for indirect prompt injection, this skill only documents the API and does not implement a vulnerable automated workflow.
Audit Metadata