image-vulnerability-report
Pass
Audited by Gen Agent Trust Hub on Apr 12, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill presents an attack surface for indirect prompt injection (Category 8) as it is designed to ingest and summarize data from external tools. * Ingestion points: Data entering via the 'registry' and 'scanner' tool connections defined in SKILL.md. * Boundary markers: Absent; there are no instructions to the agent to delimit or ignore instructions within the processed scan results. * Capability inventory: The skill aggregates data and generates structured reports but does not perform system-level operations. * Sanitization: None specified.
- [NO_CODE]: The skill consists entirely of markdown documentation and templates. No executable scripts, binaries, or shell commands were detected.
Audit Metadata