owasp-asvs
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No security threats were identified in the skill content (SKILL.md).
- [NO_CODE]: The skill is entirely documentation-based and includes no executable scripts or commands (SKILL.md).
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted security evidence, representing an ingestion surface (SKILL.md). 1. Ingestion points: Security review evidence provided by the user. 2. Boundary markers: None. 3. Capability inventory: None (no code or tool access). 4. Sanitization: None.
Audit Metadata