gap-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEPROMPT_INJECTIONINDIRECT_PROMPT_INJECTIONCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The static analysis trigger on 'ignore previous instructions' was found to be a false positive; the skill uses this phrase as a defensive guardrail, instructing the agent to specifically disregard malicious directives found in untrusted data.
- [INDIRECT_PROMPT_INJECTION]: The skill correctly identifies external data (e.g., GitHub Issues and PR comments) as potential attack vectors and explicitly directs the agent to treat them as data rather than instructions.
- [CREDENTIALS_UNSAFE]: The skill implements a security best practice by instructing the agent to redact all secrets, tokens, and personally identifiable information (PII) from its reports and records.
- [COMMAND_EXECUTION]: The inventory script and phase transitions use standard, safe CLI tools (git, gh) for metadata gathering and involve a mandatory human approval gate for any state-changing operations.
- [SAFE]: The overall architecture of the skill emphasizes read-only analysis and user-controlled execution, minimizing the risk of unauthorized or malicious actions.
Audit Metadata