ton-docs
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content from the TON documentation site and GitHub to generate responses.
- Ingestion points: Data is retrieved from the TON Docs MCP server via the
search_ton_docsandget_page_ton_docstools defined in SKILL.md. - Boundary markers: The instructions do not define explicit delimiters or 'ignore' instructions for the retrieved external content.
- Capability inventory: The agent uses the fetched documentation content to synthesize answers and generate smart contract code examples.
- Sanitization: There is no evidence of filtering or sanitization of the remote content before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill references and fetches information from official TON blockchain resources.
- Resources: Fetches content from the TON Docs MCP server at
https://docs.ton.org/mcpand refers to standards in theton-blockchainGitHub organization. - Vendor Context: These resources are the official documentation and standards repositories for the TON ecosystem.
Audit Metadata