Skills
Navigate
skills/autohandai/community-skills/implementing-vulnerability-remediation-sla/Gen Agent Trust Hub

implementing-vulnerability-remediation-sla

Pass

Audited by Gen Agent Trust Hub on Jul 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill relies on external Python packages including pandas, jinja2, and requests for data processing, reporting, and API interactions.
  • [COMMAND_EXECUTION]: The skill includes scripts scripts/agent.py and scripts/process.py intended for execution to automate security auditing and compliance calculations.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection through the processing of untrusted external data.
  • Ingestion points: Data enters the agent context via CSV files (--vulns and --assets in scripts/process.py) and JSON payloads from remote API endpoints in scripts/agent.py.
  • Boundary markers: The instructions do not define boundary markers or explicit directives to ignore instructions embedded within the ingested data.
  • Capability inventory: The skill possesses capabilities for network operations (requests.get in scripts/agent.py) and file system writes (HTML and CSV report generation in scripts/process.py).
  • Sanitization: Content from the CSV files is directly interpolated into HTML reports using f-strings in scripts/process.py without sanitization or escaping, which could allow maliciously crafted data to influence downstream agent actions or report interpretation.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 16, 2026, 09:08 AM
Security Audit — agent-trust-hub — implementing-vulnerability-remediation-sla