mistica-react
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
@telefonica/misticapackage via npm. This package belongs to the vendor's official namespace and is necessary for the skill's functionality. - [EXTERNAL_DOWNLOADS]: References and fetches a documentation file (
llms.md) from the official Telefonica repository on GitHub. This is used as a fallback source for design guidelines. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read and strictly follow the contents of
llms.md. While this involves ingesting external data to guide agent behavior, the source is an official vendor documentation file specifically designed to provide context for large language models.
Audit Metadata