security-audit
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data such as source code, system logs, and dependency manifests for auditing purposes. While this is the intended function, it creates a potential surface for indirect prompt injection.
- Ingestion points: External data is processed during the static and dynamic analysis phases described in SKILL.md.
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore instructions' warnings for the agent when reading external files.
- Capability inventory: The skill implies the use of file-read access and terminal-based audit tools (e.g., npm audit, pip-audit) as referenced in the OWASP checklist.
- Sanitization: No instructions are provided for sanitizing or escaping the content of the audited files before they are parsed by the agent.
- [NO_CODE]: The skill contains no executable scripts, binaries, or automated installation commands. It relies solely on instructional markdown files and reporting templates, which significantly reduces the risk of direct malicious behavior.
Audit Metadata