agent-user-tools
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a set of specialized tools (
mcp__flow-nexus__*) for user-centric operations such as profile updates and file storage. These tools are aligned with the skill's stated purpose and operate within the expected platform context. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its handling of external data. Ingestion points: Data enters the agent context through user profile retrieval and file storage access via
mcp__flow-nexus__user_profileand storage tools. Boundary markers: There are no explicit instructions or delimiters to distinguish between system instructions and processed data content. Capability inventory: The agent can perform file writes viamcp__flow-nexus__storage_uploadand initiate sub-agent consultations throughmcp__flow-nexus__seraphina_chat. Sanitization: The skill does not define methods for validating or sanitizing ingested content before it is used in subsequent operations.
Audit Metadata