you-research
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the Coinbase Payments MCP repository (github.com/coinbase/payments-mcp) for optional on-chain payment functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from the web through research and search tools, which is a potential vector for indirect instructions. Ingestion points:
SKILL.md(via toolsyou-search,you-contents,you-research). Boundary markers: The instructions lack explicit delimitation or warnings to ignore instructions within the retrieved web content. Capability inventory: The skill utilizes network-enabled research tools to synthesize findings from external sources. Sanitization: No specific filtering or sanitization of retrieved content is described.
Audit Metadata