Skills
Navigate
skills/bitrix-tools/marketplace-security-skills/scan-composer/Gen Agent Trust Hub

scan-composer

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes python3 to run a script specified by the REVIEW_SCRIPT variable and uses python3 -m json.tool for JSON validation. The script execution is a core part of the orchestrated workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection as it processes untrusted source code from MODULE_DIR to generate security findings.
  • Ingestion points: PHP source code files within the MODULE_DIR directory.
  • Boundary markers: None provided; the skill does not specify delimiters for the code it analyzes.
  • Capability inventory: The skill can read/write files and execute Python scripts via the shell.
  • Sanitization: The instructions do not mention any sanitization or filtering of the source code content before analysis.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 10:03 AM
Security Audit — agent-trust-hub — scan-composer