guide-integrator
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Retrieves development references and documentation from the author's official repository at
https://camoa.github.io/dev-guides/. This is the primary intended function of the skill.- [PROMPT_INJECTION]: The skill processes content from external web sources and local user-defined paths, creating an indirect prompt injection surface. - Ingestion points: Remote content via
WebFetchfromcamoa.github.ioand local files fromguides_pathidentified inSKILL.md. - Boundary markers: The instructions lack explicit delimiters or warnings to treat fetched content as data rather than instructions.
- Capability inventory: Restricted to
WebFetch,Read,Glob, andEdit. No shell execution or dynamic code evaluation tools are present. - Sanitization: No evidence of content sanitization or validation before integration into project files.
Audit Metadata