youmind-webpage-generator
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
@youmind-ai/clipackage from the NPM registry. This is the official command-line tool for the YouMind service which provides the underlying infrastructure for the skill's features.\n- [COMMAND_EXECUTION]: Shell commands are used to invoke theyoumindCLI for interacting with the service API. The workflow instructs the agent to interpolate user-provided descriptions into CLI arguments, which could present a command injection surface if the agent platform does not properly escape the input during execution.\n- [DYNAMIC_EXECUTION]: The skill usesnode -eto execute a JavaScript snippet that parses JSON data retrieved from the API. The script is hardcoded in the skill instructions and used for data extraction and processing of the remote API response.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes data returned from the YouMind API (generated webpage results). This introduces a potential surface for indirect prompt injection if the remote content contains malicious instructions designed to influence the agent's behavior during subsequent steps.\n - Ingestion points: Content retrieved via
youmind call listMessagesand processed by thenode -escript in SKILL.md.\n - Boundary markers: None explicitly defined in the processing instructions to separate user data from instructions.\n
- Capability inventory: Network access (via CLI), shell execution, and user-facing output links to the YouMind platform.\n
- Sanitization: The skill extracts data from JSON fields but does not perform specific sanitization or escaping on the text content within those fields before returning it to the user or agent.
Audit Metadata