netlify-blobs
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation instructs users to install the
@netlify/blobsanduuidpackages via npm. The@netlify/blobspackage is an official resource provided by Netlify. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to ingest unstructured data from a remote key-value store, which creates a potential surface for indirect prompt injection if retrieved content is processed by an AI agent.
- Ingestion points: Data enters the agent's context through
store.get()andstore.getWithMetadata()method calls described inSKILL.md. - Boundary markers: The code examples provided do not demonstrate the use of prompt delimiters or instructions to ignore embedded commands in the retrieved data.
- Capability inventory: The skill possesses the capability to read, write, list, and delete objects and metadata within the storage service.
- Sanitization: The documentation does not specify sanitization or validation routines for blob content, though it strongly recommends gating store access behind authenticated functions to ensure privacy.
Audit Metadata