trailing-slash
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of documentation and configuration snippets for common web servers and frameworks (Nginx, Apache, Next.js). No signs of malicious command execution, data exfiltration, or obfuscation were found.
- [INDIRECT_PROMPT_INJECTION]: The skill involves auditing external website content (HTML, metadata, and headers), which constitutes an indirect prompt injection surface.
- Ingestion points: The agent is instructed to review rendered HTML, metadata generation, structured data, and response headers in file SKILL.md.
- Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore instructions that might be embedded in the audited website content.
- Capability inventory: The skill is limited to auditing and flagging issues. It does not define any scripts with subprocess calls, file-write operations, or network exfiltration capabilities.
- Sanitization: No sanitization or escaping of the external content is mentioned in the provided instructions.
Audit Metadata