security-prior-art-survey
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches security corpora, vulnerability advisories, and incident records from well-known technology and security services, including MITRE (CWE, CAPEC, ATT&CK), NIST (NVD), OWASP (ASVS, Top 10), and official cloud provider feeds (AWS, Google Cloud, Microsoft). These downloads are fundamental to the tool's intended research purpose.
- [COMMAND_EXECUTION]: The automated test suite (
scripts/test_validate_security_prior_art.py) usessubprocess.runto execute a local Python-based validator script. This is a standard practice for verifying the integrity and schema compliance of the generated security artifacts. - [DATA_EXFILTRATION]: While the skill processes data from potentially untrusted external sources, it mandates the use of a content-sanitization guardrail for all reads. The instructions explicitly treat all retrieved content as data and never as instructions, mitigating the risk of indirect prompt injection or unauthorized code execution.
- [PROMPT_INJECTION]: No patterns were detected that attempt to override safety filters or bypass system guidelines. The skill's instructions are focused on structured research and rigorous validation methodology.
Audit Metadata