umbraco-workspace
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill fetches and processes content from external documentation URLs to perform code generation and project modification. Ingestion points: Several documentation URLs from docs.umbraco.com are accessed using WebFetch. Capability inventory: The skill uses Write and Edit tools to create manifests, workspace contexts, and views. Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within the fetched documentation. Sanitization: There is no explicit requirement to sanitize or validate the content retrieved from the web before applying it to code generation.
- [EXTERNAL_DOWNLOADS]: The skill fetches technical guidance and code examples from official vendor documentation at docs.umbraco.com.
Audit Metadata