swe-scrutinize
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because its primary function is to ingest and analyze untrusted data provided by users or external systems.
- Ingestion points: Pull requests, code diffs, design documents, and project plans (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when the agent processes external code or documentation, increasing the risk that embedded instructions could be followed.
- Capability inventory: The skill requires the agent to trace code paths and evaluate system behavior, which relies on the agent's internal reasoning and file-access capabilities.
- Sanitization: No validation or sanitization steps are defined for the external content before it is processed by the agent.
Audit Metadata