write-security-report
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a formal structure for writing security reports based on assessment outcomes.
- [NO_CODE]: The skill contains only documentation and instructions; no scripts or executable files are present.
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface by ingesting security test results and evidence. Evidence chain: 1. Ingestion points: Plan rows and raw evidence. 2. Boundary markers: Absent. 3. Capability inventory: File writing to security-artifacts/report.md. 4. Sanitization: Mandates linking all claims to raw evidence and explicitly excluding credentials from the final report.
Audit Metadata