umbraco-current-user-action
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation from
docs.umbraco.com. This is the official documentation repository for the Umbraco CMS vendor. - [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow where external documentation is ingested and used to generate code files, creating a potential surface for indirect instructions.
- Ingestion points: WebFetch calls to
docs.umbraco.comspecified inSKILL.md. - Boundary markers: None explicitly defined in the prompt template.
- Capability inventory: File system access (
Write,Edit,Read) and network access (WebFetch). - Sanitization: The skill relies on the trusted nature of the official vendor documentation and does not define explicit sanitization steps for the fetched content.
Audit Metadata