hola-poke-yeoksam
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill requires the user to execute an external npx command to retrieve the primary instructions. This practice allows for dynamic instruction updates at runtime, bypassing static review of the skill files.
- [DATA_EXFILTRATION]: The raffle feature collects user phone numbers and transmits them to a remote server (https://hola-poke-yeoksam-skill.onrender.com/mcp). While disclosed as part of the raffle functionality, it involves outbound transmission of Personally Identifiable Information (PII).
- [INDIRECT_PROMPT_INJECTION]: 1. Ingestion points: Remote MCP server responses from the get_menu, get_shop_info, and enter_event tools. 2. Boundary markers: No explicit delimiters are used to wrap external content. 3. Capability inventory: User input collection and network requests to an external API. 4. Sanitization: Instructions require displaying server messages literally, which may allow a remote server to inject instructions into the agent's context.
Audit Metadata