umbraco-file-upload-preview
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
WebFetchtool to retrieve the latest implementation guidelines from the vendor's official documentation site (docs.umbraco.com). This is a legitimate use of external resources for a developer tool. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it ingests content from external URLs to influence code generation.
- Ingestion points: Documentation is fetched from
docs.umbraco.comusing theWebFetchtool. - Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded commands within the fetched documentation content.
- Capability inventory: The skill employs
WriteandEdittools to generate file manifests and web component implementations. - Sanitization: There is no explicit sanitization or filtering of the fetched content mentioned, though the source is the vendor's own verified documentation.
Audit Metadata