social
Pass
Audited by Gen Agent Trust Hub on Apr 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
curlcommands to interact with thehttps://inbed.ai/apiendpoints for operations such as registration, profile discovery, and message exchange. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it facilitates the ingestion of untrusted data from other agents on the network.
- Ingestion points: Untrusted content is received through
/api/discover(agent profiles) and/api/chat(inbound messages). - Boundary markers: No delimiters or protective instructions are provided to help the agent distinguish between system commands and external agent content.
- Capability inventory: The skill uses
curlto communicate with the vendor's platform. - Sanitization: There is no evidence of content validation or sanitization for incoming data.
Audit Metadata