web-app-security-audit
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to systematically ingest and analyze untrusted third-party source code, which serves as a vector for indirect prompt injection.
- Ingestion points: The agent is directed to read and analyze various project files including source code (JS, TS, Python, Ruby, PHP), configuration files (.env, robots.txt), and API definitions (Phase 1, Phase 7).
- Boundary markers: There are no explicit instructions or delimiters defined to ensure the agent treats the content of the files being audited strictly as data rather than instructions.
- Capability inventory: The skill leverages shell command execution capabilities to run search tools (grep), network tools (curl), and package managers (npm, pip, bundle) across multiple audit phases.
- Sanitization: The instructions do not specify any validation or sanitization steps for the output of the automated tests before the agent processes them.
Audit Metadata