security-scanner
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted source code, which could contain malicious instructions designed to manipulate the agent's behavior during the audit process.
- Ingestion points: Source code files are read and processed in 'Step 3: Systematic Analysis' to identify vulnerabilities.
- Boundary markers: The skill instructions lack explicit boundary markers or instructions to the agent to disregard natural language commands found within the scanned code.
- Capability inventory: The agent has the ability to clone repositories using
gh, create directories, and write files to the local filesystem. - Sanitization: There is no mechanism described for sanitizing or filtering the content of the source files before the agent analyzes them.
Audit Metadata