source-security-assessment
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a standard methodology for security reviews and infrastructure assessments. All mentioned tools (/semgrep, /trivy, /osv-scanner) are well-known industry standards for the described tasks.\n- [INDIRECT_PROMPT_INJECTION]: The skill has a potential surface for indirect prompt injection as its core function is to process and analyze untrusted external source code and configurations.\n
- Ingestion points: Source repositories, dependency trees, and container configurations specified in SKILL.md.\n
- Boundary markers: Absent; the instructions do not specify delimiters to isolate external content.\n
- Capability inventory: Invocation of /semgrep, /trivy, and /osv-scanner tool calls defined in SKILL.md.\n
- Sanitization: Absent; there are no instructions for filtering or sanitizing the input artifacts before analysis.
Audit Metadata