skills/vm0-ai/vm0-skills/inth/Gen Agent Trust Hub

inth

Pass

Audited by Gen Agent Trust Hub on Jun 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses curl to perform authenticated API requests and jq for parsing JSON responses.
  • [COMMAND_EXECUTION]: It includes a diagnostic command zero doctor to help users verify their environment and connector status.
  • [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it processes output from external API endpoints.
  • Ingestion points: Remote API responses fetched via curl in SKILL.md.
  • Boundary markers: Absent; no delimiters or instructions are used to distinguish API data from instructions.
  • Capability inventory: Network operations (curl) and CLI tool execution (zero doctor) are present in SKILL.md.
  • Sanitization: Absent; the skill does not perform validation or sanitization on the external data before it is processed by the agent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 30, 2026, 07:14 AM
Security Audit — agent-trust-hub — inth