umbraco-tiptap-toolbar-extension
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches documentation from official Umbraco domains (docs.umbraco.com) and Tiptap (tiptap.dev) to ensure generated extensions adhere to the latest framework standards.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest external data from documentation URLs which is then used to influence the generation of manifest and API files.
- Ingestion points: The
WebFetchtool is used inSKILL.mdto retrieve content from external documentation links. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing the fetched content.
- Capability inventory: The skill possesses
WriteandEditcapabilities to create and modify local files based on external input. - Sanitization: There are no explicit steps described for sanitizing or validating the content retrieved from the web before it is used for code generation.
Audit Metadata