php-crlf-audit
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted PHP source code, which creates a vulnerability surface for indirect prompt injection. Maliciously crafted source code could contain instructions designed to manipulate the agent's behavior or output.
- Ingestion points: The skill analyzes external PHP project source code provided by the user.
- Boundary markers: There are no explicit instructions to use delimiters or ignore embedded instructions within the source code being analyzed.
- Capability inventory: The skill instructs the agent to write audit reports to the filesystem at
{output_path}/vuln_audit/crlf_{timestamp}.md. - Sanitization: The instructions do not specify any sanitization or escaping mechanisms for the data extracted from the source code before it is interpolated into the final report.
Audit Metadata