umbraco-tiptap-extension
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests external data to guide code generation, creating a potential injection surface.
- Ingestion points: Documentation URLs (
docs.umbraco.comandtiptap.dev) are accessed using theWebFetchtool as specified in the workflow section ofSKILL.md. - Boundary markers: The skill does not provide specific instructions to the agent to treat the fetched documentation as untrusted or to use delimiters to separate it from instructions.
- Capability inventory: The skill utilizes the
WriteandEdittools to generate file content (manifests and API scripts) based on the fetched data. - Sanitization: No specific sanitization or validation steps are defined for the content retrieved from the external sites.
- Note: This finding is considered safe as the ingestion points are official documentation sources for the platform being extended.
- [EXTERNAL_DOWNLOADS]: The skill fetches technical documentation and implementation guidelines from Umbraco's official documentation domain and Tiptap's official service domain to support the extension development workflow.
Audit Metadata