aegis-business-logic-races
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external repositories, which constitutes an ingestion point for untrusted data that could potentially influence agent behavior if malicious instructions are embedded in the target code.
- Ingestion points: The skill performs static analysis on source code, database migrations, and framework configuration files within target repositories.
- Boundary markers: The instructions do not define explicit delimiters or instructions to the agent to treat the analyzed repository content as untrusted or potentially adversarial, which is a standard risk for analysis-focused skills.
- Capability inventory: The skill utilizes shell-based search tools (like ripgrep) and network tools (like curl) to identify and verify security findings. Maliciously crafted filenames or file contents in a target repository could attempt to exploit these capabilities.
- Sanitization: The skill lacks specific mechanisms for sanitizing or escaping the data read from the repository before it is processed by the agent's logic.
Audit Metadata