jenkins-symfony-php-acrazie
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill parses untrusted repository data (e.g.,
composer.json,composer.lock,symfony.lock, and Symfony console scripts). While this is a common vector for indirect prompt injection, the skill's specific read-only constraint limits the risk. - Ingestion points: Project configuration and lock files identified in
SKILL.md. - Boundary markers: None defined for the analyzed files.
- Capability inventory: The skill identifies commands for the
jenkins-devops-acrazieorchestrator but does not request tool execution or file write permissions. - Sanitization: No specific input validation for the repository content is mentioned.
Audit Metadata