umbraco-package-view
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS] (LOW): The skill uses
WebFetchto retrieve documentation fromdocs.umbraco.com. While this is a legitimate source and essential for the skill's purpose, it introduces a dependency on external content that is not on the pre-approved trusted sources list. - [DATA_EXFILTRATION] (SAFE): No hardcoded credentials, sensitive file path access, or unauthorized network transmissions were detected.
- [PROMPT_INJECTION] (SAFE): There are no attempts to override system prompts, bypass safety filters, or extract underlying instructions.
- [INDIRECT_PROMPT_INJECTION] (LOW): The skill provides an attack surface by ingesting external data.
- Ingestion points: Documentation URLs in the 'Documentation' section of
SKILL.md. - Boundary markers: Absent; the workflow suggests direct application of fetched data.
- Capability inventory:
WriteandEdittools used to generate project files. - Sanitization: No sanitization or verification of the fetched content is implemented.
- [COMMAND_EXECUTION] (SAFE): The skill does not execute shell commands, install software packages, or perform any privilege escalation.
Audit Metadata