security-audit-coordinator
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted codebase content. Ingestion points include repository-relative source code and manifest files. Boundary markers are established in SKILL.md, explicitly defining content as untrusted evidence rather than instructions. The capability inventory is limited to local file reading and validation. Sanitization is implemented through mandatory secret redaction and path validation.- [COMMAND_EXECUTION]: The skill provides a script,
scripts/validate_audit.py, for structural validation of audit artifacts. This script uses only Python standard libraries and includes security checks to prevent processing symlinks or excessively large files.- [DATA_EXFILTRATION]: The skill includes strict prohibitions against using live credentials, probing deployed endpoints, or contacting external services during an audit, alongside requirements to redact sensitive information.
Audit Metadata