scry
Pass
Audited by Gen Agent Trust Hub on Mar 14, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted data from a public corpus (ingested via
api.exopriors.com/v1/scry/query), which presents a surface for indirect prompt injection. - Ingestion points: Data is retrieved from external sources including Reddit, arXiv, and various forums via the Scry SQL API (SKILL.md).
- Boundary markers: The instructions explicitly mandate the use of a
content_riskfilter (WHERE content_risk IS DISTINCT FROM 'dangerous') to exclude known adversarial content. - Capability inventory: The skill performs network operations to the vendor API and can create shareable artifacts via
POST /v1/scry/shares(SKILL.md). - Sanitization: Content is pre-screened by the API provider and flagged via the
content_riskcolumn to assist in safe processing.- [EXTERNAL_DOWNLOADS]: The skill interacts with the vendor's API endpoints atapi.exopriors.comfor query execution, schema discovery, and feedback submission. These are recognized as vendor-owned resources and standard functionality for the service.- [CREDENTIALS_UNSAFE]: Employs theEXOPRIORS_API_KEYenvironment variable for API authentication. No hardcoded secrets or unauthorized exposures were found.
Audit Metadata