integrate-context-matic
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is designed to guide an agent through the process of API integration using the
context-maticMCP server. The instructions focus on project language detection, checking for existing guidelines, and using specialized discovery tools. These are standard operations for a software development assistant. - [INDIRECT_PROMPT_INJECTION]: The skill has an inherent surface area for indirect prompt injection because it instructs the agent to ingest and act upon data returned from external tools (
ask,fetch_api,model_search,endpoint_search), which provide code samples and integration guidance. - Ingestion points: Tool outputs from the
context-maticMCP server tools (e.g.,ask,fetch_api) referenced in SKILL.md. - Boundary markers: Absent. The skill does not explicitly instruct the agent to use delimiters or warnings when processing the tool output.
- Capability inventory: The agent is expected to install packages (npm, pip, go get), write authentication credentials to configuration files (e.g.,
.env), and modify application code. - Sanitization: Absent. The skill relies on the agent's core capabilities to safely interpret and implement the provided code samples.
Audit Metadata