skills/ruvnet/ruflo/agent-user-tools/Gen Agent Trust Hub

agent-user-tools

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill implements a set of specialized tools (mcp__flow-nexus__*) for user-centric operations such as profile updates and file storage. These tools are aligned with the skill's stated purpose and operate within the expected platform context.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface due to its handling of external data. Ingestion points: Data enters the agent context through user profile retrieval and file storage access via mcp__flow-nexus__user_profile and storage tools. Boundary markers: There are no explicit instructions or delimiters to distinguish between system instructions and processed data content. Capability inventory: The agent can perform file writes via mcp__flow-nexus__storage_upload and initiate sub-agent consultations through mcp__flow-nexus__seraphina_chat. Sanitization: The skill does not define methods for validating or sanitizing ingested content before it is used in subsequent operations.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 11:38 AM
Security Audit — agent-trust-hub — agent-user-tools