launch-site-checklist
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard
curlandgrepcommands to inspect HTTP headers, status codes, and redirect chains for a user-specified domain. It also includes a loop to process local files likeold-paths.txtfor batch redirect verification. These are typical behaviors for website auditing tools. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data by fetching content from the target website's homepage,
robots.txt, andsitemap.xml. This creates a surface for indirect prompt injection if the target site contains malicious instructions hidden in metadata or headers. - Ingestion points: The
curlcommands in sections 2 and 4 fetch data from the target website (SKILL.md). - Boundary markers: The skill uses
grepto filter for specific strings (e.g., meta tags, titles), which limits the data the agent processes, though it does not use explicit prompt delimiters. - Capability inventory: The skill performs network reads (via
curl) and generates a summary report based on the findings. - Sanitization: No specific prompt-level sanitization is present, but the use of focused
greppatterns serves as a functional filter for extracted content.
Audit Metadata