secrets-audit
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill scans untrusted data from source code and Git history, which presents a vulnerability to indirect prompt injection where malicious instructions in analyzed files could influence the agent. \n
- Ingestion points: Content read from local files and Git logs via
grepandgit log(SKILL.md). \n - Boundary markers: No specific delimiters or instructions to ignore embedded content are provided. \n
- Capability inventory: The skill utilizes
Bash,Read, andWritetools to perform its tasks. \n - Sanitization: There are no measures to sanitize or validate extracted content before processing. \n- [COMMAND_EXECUTION]: The skill leverages shell commands for its primary auditing and verification functions. \n
- Evidence: Employs
grepfor provider keys,git logfor historical scans, and provider-specific CLI commands (e.g.,aws sts get-caller-identity) for credential validation (SKILL.md).
Audit Metadata