app-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes data observed during an application analysis phase to populate placeholders in various report templates.
- Ingestion points: Data is interpolated into placeholders (e.g., {APP}, {PRICE}, {DESC}) within the templates in
references/report-templates.md. - Boundary markers: The templates utilize standard Markdown and HTML formatting for structure.
- Capability inventory: The skill files contain no shell execution commands, network request logic, or sensitive file system operations.
- Sanitization: No explicit sanitization or filtering is defined for the values being inserted into the report placeholders.
- [NO_CODE]: The skill is a knowledge-based extension consisting entirely of Markdown templates and metadata. It does not include scripts, binaries, or executable logic.
Audit Metadata