soc2-gap-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied evidence and artifacts to identify control gaps. This represents a theoretical attack surface where malicious instructions could be embedded in the evidence provided to the agent. Evidence Chain: 1. Ingestion points: Review artifacts and implementation signals (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: Generates markdown reports and escalates to a security agent for technical validation. 4. Sanitization: Absent.
- [SAFE]: The skill logic is focused entirely on SOC 2 readiness evaluation and follows industry-standard control areas. No malicious code, network exfiltration, or unauthorized file access was detected.
Audit Metadata