victoriametrics-docs
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes content retrieved from the external VictoriaMetrics documentation site, creating an inherent surface for indirect prompt injection should the source documentation be modified with malicious instructions.
- Ingestion points: The
scripts/vmdocs.pyscript fetches documentation indices and page content fromhttps://docs.victoriametrics.com/. - Boundary markers: While instructions guide the agent to quote and cite the link for every claim, there are no explicit delimiters or "ignore embedded instructions" warnings for the fetched text.
- Capability inventory: The skill is restricted to
Bash(python3:*)andReadtools. The script performs network fetches, local caching, and text extraction. - Sanitization: The script includes logic to filter out potentially hazardous HTML elements such as
<script>,<style>, and<nav>tags, and unescapes HTML entities before returning the text. - [EXTERNAL_DOWNLOADS]: Fetches documentation indexes and content from the official VictoriaMetrics documentation domain (
docs.victoriametrics.com). This network activity is documented neutrally as it aligns with the skill's primary purpose and targets the vendor's own infrastructure.
Audit Metadata