you-discover
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXFILTRATION]: The skill connects to official vendor domains at api.you.com and you.com to access discovery tools and documentation. These network operations are legitimate functions of the skill and utilize infrastructure owned by the author youdotcom-oss.
- [PROMPT_INJECTION]: The skill identifies an indirect prompt injection surface from tool outputs but provides effective mitigations. It explicitly instructs the agent to treat catalog and documentation results as untrusted evidence rather than instructions, requiring verification against official sources and mandatory user confirmation before any tool installation or configuration modification occurs.
Audit Metadata