security-bounty-hunter
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted code from external repositories, which creates a surface for indirect prompt injection attacks where malicious code could attempt to influence the agent's behavior.
- Ingestion points: Processes repository code, HTTP handlers, file uploads, background jobs, and webhooks from external sources (SKILL.md).
- Boundary markers: No explicit boundary markers or delimiters are defined to separate untrusted data from the agent's instructions during analysis.
- Capability inventory: The skill utilizes shell commands (semgrep) and has the capability to read code paths and verify entrypoints.
- Sanitization: No specific sanitization or validation mechanisms are described for the content being processed from the repositories.
Audit Metadata