umbraco-package-view
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill retrieves technical documentation and registry information from Umbraco's official documentation site (docs.umbraco.com) using the WebFetch tool.
- [INDIRECT_PROMPT_INJECTION]: The skill provides a workflow for ingesting external documentation which is then used to inform the generation of code files.
- Ingestion points: External content is brought into the agent context from the Umbraco documentation URLs via the WebFetch tool.
- Boundary markers: The workflow does not specify the use of delimiters or 'ignore' instructions for the content retrieved from documentation pages.
- Capability inventory: The skill is configured with Write and Edit capabilities, allowing it to create or modify application files (e.g., manifests.ts, my-package-view.element.ts).
- Sanitization: The skill lacks defined sanitization or validation steps for the content fetched from the documentation source.
Audit Metadata