security-audit
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external codebase files through search commands and audits. This creates a potential surface where malicious instructions embedded in the audited code could attempt to influence the agent's analysis or output.
- Ingestion points: Processes codebase files via
grepand dependency files vianpm audit/pip audit. - Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are provided for the data being analyzed.
- Capability inventory: The skill utilizes file searching (
grep), line counting (wc), and package auditing (npm audit,pip audit) to inspect project files. - Sanitization: The skill does not provide explicit sanitization or escaping of the content found within the audited files before processing.
Audit Metadata