python
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to review and debug Python source code and configuration files provided as input. This creates an attack surface where malicious instructions could be embedded within the content being analyzed (such as in comments, docstrings, or metadata) to influence the agent's behavior.
- Ingestion points: Python source files (.py), configuration files (pyproject.toml, requirements.txt), and lock files (uv.lock).
- Boundary markers: Absent. There are no instructions defining delimiters or warnings to disregard instructions found within the data being processed.
- Capability inventory: The core workflow involves file system access and the use of tools like subprocess, pip, and uv.
- Sanitization: Absent. The skill does not mandate sanitization or validation of content extracted from external files before the agent processes it.
Audit Metadata