bootstrap-client-ip
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill implements a ClientIP module for Phoenix apps using security best practices, specifically trusted proxy CIDR filtering to mitigate X-Forwarded-For spoofing.
- [INDIRECT_PROMPT_INJECTION]: The skill generates code to process untrusted HTTP headers. 1. Ingestion Point: req_header in lib/_web/client_ip.ex. 2. Boundary markers: :inet.parse_address validation ensures valid IP format. 3. Capability: File-write (lib/_web/client_ip.ex, config/config.exs) and router modification (lib/_web/router.ex). 4. Sanitization: CIDR-based trusted proxy filtering logic is implemented to safely process proxy headers.
Audit Metadata