rising
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Retrieves resource lists from
https://vibeindex.ai/api/rising-stars. This is a vendor-owned domain used for the skill's primary trending feature. - [INDIRECT_PROMPT_INJECTION]: The skill processes repository data from an external source.
- Ingestion points: API responses fetched in
SKILL.md. - Boundary markers: The skill uses a strict table format to constrain how the external data is rendered.
- Capability inventory: Limited to WebFetch for data retrieval; no autonomous command execution capabilities are enabled for this data.
- Sanitization: Data is limited to specific fields (name, description) for display.
- [COMMAND_EXECUTION]: Displays
npxinstallation strings for users to copy and run manually. There is no automated execution of these commands by the AI agent.
Audit Metadata