umbraco-property-action
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses the
WebFetchtool to retrieve current technical specifications from the official Umbraco documentation site (docs.umbraco.com). This behavior is consistent with the skill's primary purpose of providing accurate development assistance. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external content via documentation URLs to guide the generation of manifest and implementation files. While this creates a potential injection surface for untrusted data to influence agent output, the risk is mitigated by the use of official vendor-controlled sources.
- Ingestion points: SKILL.md instructions trigger
WebFetchon external Umbraco documentation URLs. - Boundary markers: The instructions do not specify explicit delimiters or "ignore instructions" markers for the fetched content.
- Capability inventory: The skill has
WriteandEditcapabilities to generate local code files based on the documentation. - Sanitization: There is no explicit sanitization described for the content retrieved from the web.
Audit Metadata