security-analyst
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify user-provided code and configurations, creating a surface where malicious instructions embedded in the data could potentially influence the agent's behavior.
- Ingestion points: The skill ingests user-supplied source code and system configurations for threat modeling and vulnerability identification.
- Boundary markers: There are no explicit instructions or delimiters defined to separate user-provided data from the agent's core operational instructions.
- Capability inventory: The 'Implementation Mode' explicitly enables direct file-writing capabilities to fix identified vulnerabilities.
- Sanitization: The instructions do not define requirements for sanitizing or validating content extracted from analyzed code before it is used in remediation steps.
Audit Metadata