code-slop
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted source code and pull request diffs, creating a potential surface for indirect prompt injection. * Ingestion points: As specified in Audit Step 1 of SKILL.md, the agent audits recently touched repository files or changed files in a PR diff. * Boundary markers: No explicit instructions are provided to use delimiters or warnings to ignore embedded instructions within the ingested source code. * Capability inventory: The skill uses shell commands like grep, find, and node to analyze file contents, as documented in SKILL.md and rule files like rules/naming-generic-placeholders.md. * Sanitization: The instructions do not define sanitization or escaping steps for the content of the analyzed files before they are processed by the agent's analysis logic.
Audit Metadata