crypto-vulnerability-analyst
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input data which could contain malicious instructions designed to subvert the agent's behavior during analysis.
- Ingestion points: Untrusted data enters via
code_or_binary_context,protocol_description, andkey_management_modelfields inSKILL.md. - Boundary markers: The skill does not define delimiters or specific instructions to ignore embedded commands within the input data.
- Capability inventory: The skill instructions focus on analytical tasks and suggest performing "runtime probes," though no specific tools for network or file access are defined in the provided file.
- Sanitization: There is no evidence of input validation or sanitization routines.
- [NO_CODE]: The analyzed skill consists solely of a Markdown instruction file and does not include any executable scripts, binaries, or configuration for external dependencies.
Audit Metadata