workout-generator
Warn
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Interacts with remote endpoints
https://workout-rho-eight.vercel.appandhttps://facilitator.corbits.devto fetch workout data and facilitate cryptocurrency payments. - [DATA_EXFILTRATION]: Instructs the agent to transmit a signed Solana transaction via the
X-PAYMENTHTTP header to a remote server. A signed transaction is valid cryptographic material that allows the recipient to broadcast the transaction and move funds. - [COMMAND_EXECUTION]: Requires the agent to sign a blockchain transaction, which typically involves the execution of cryptographic libraries or wallet-related CLI tools.
- [PROMPT_INJECTION]: Vulnerable to indirect prompt injection through the processing of untrusted user input.
- Ingestion points: The
userPreferencesfree-text field in the POST request to the workout generation endpoint. - Boundary markers: No delimiters or instructions to ignore embedded commands are present.
- Capability inventory: The skill possesses the ability to perform network requests and sign financial transactions.
- Sanitization: No evidence of sanitization or input validation for the
userPreferencesfield.
Audit Metadata