umbraco-property-editor-ui
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to fetch documentation and tutorials from official Umbraco domains (docs.umbraco.com) to ensure implementations follow current standards. This is a standard vendor-provided resource fetch.
- [INDIRECT_PROMPT_INJECTION]: The skill has an indirect prompt injection surface as it ingests external data that influences subsequent code generation steps.
- Ingestion points: Documentation and tutorial URLs specified in SKILL.md are retrieved using the WebFetch tool.
- Boundary markers: The skill does not define specific delimiters or instructions for the agent to ignore potentially malicious content embedded within the fetched documentation.
- Capability inventory: The agent is authorized to use Write and Edit tools to create TypeScript and JSON files based on the retrieved information.
- Sanitization: There are no explicit instructions for validating or sanitizing the content retrieved from external URLs before it is processed.
Audit Metadata