uptime-robot
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill initiates network connections to https://api.uptimerobot.com/v2 to perform monitoring tasks. This targets a well-known service and is consistent with the skill's intended purpose.
- [PROMPT_INJECTION]: The skill processes data from the UptimeRobot API, which creates a potential surface for indirect prompt injection if the API response contains adversarial content. 1. Ingestion points: Monitor information is retrieved from the getMonitors endpoint within SKILL.md. 2. Boundary markers: There are no explicit markers or instructions to isolate the retrieved data from the agent's operational prompt. 3. Capability inventory: The skill is configured to use network operations via fetch but does not have capabilities for file system modification or command execution. 4. Sanitization: The implementation does not show any validation or escaping of the data received from the external API.
Audit Metadata