studio-develop-security-audit
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses standard command-line utilities including
git ls-files,git diff,npm audit, andpip audit. These commands are used to identify the codebase stack, map the attack surface, and check for known vulnerabilities in dependencies. The usage is strictly diagnostic and appropriate for a security auditing tool. - [INDIRECT_PROMPT_INJECTION]: The skill inherently processes untrusted data by analyzing the entire codebase of a repository. This creates a surface for indirect prompt injection if malicious code contains instructions targeting the auditor.
- Ingestion points: The skill audits the "whole codebase" or "uncommitted changes" as described in the workflow section of SKILL.md.
- Boundary markers: The instructions do not define specific delimiters (e.g., XML tags or unique markers) to separate the analyzed code from the agent's instructions.
- Capability inventory: The agent is authorized to read files, run audit tools, and write a summary report to
docs/SECURITY-AUDIT.md. - Sanitization: There are no explicit instructions to sanitize or escape content from the codebase before it is evaluated or included in the audit report.
Audit Metadata