launchdarkly-flag-targeting
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests feature flag configurations from the LaunchDarkly API via the
get-flagtool. These configurations include user-controllable fields like flag descriptions and rule names that could be used to host malicious instructions intended to influence the agent's behavior during a targeting change workflow. - Ingestion points: Flag state and metadata are retrieved in
SKILL.mdusing theget-flagMCP tool. - Boundary markers: The skill does not define specific delimiters or instruction-ignore warnings to wrap flag metadata when it is presented to the agent's context.
- Capability inventory: The skill possesses significant modification capabilities including
toggle-flag,update-rollout, andupdate-targeting-rulesas described inSKILL.mdandreferences/targeting-patterns.md. - Sanitization: No sanitization or filtering of the API responses is performed before the data is used to inform targeting decisions.
- [EXTERNAL_DOWNLOADS]: The skill references and depends on the official LaunchDarkly MCP server and documentation repositories.
- Evidence:
marketplace.jsonrequires the@launchdarkly/mcp-serverandREADME.mdprovides links to the vendor's official GitHub repository and documentation site.
Audit Metadata