eval-error-analysis
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process AI traces which are treated as untrusted data that could contain malicious instructions. The review application correctly mitigates this risk by using
textContentfor all dynamic data rendering intemplates/review-app/app.js, preventing cross-site scripting (XSS). The documentation inreferences/local-review.mdprovides explicit guidance on escaping and sandboxing untrusted content. - [EXTERNAL_DOWNLOADS]: The skill contains references to official documentation and API endpoints on
confident-ai.com. These are legitimate vendor resources belonging to the skill's author and are used to support optional managed workflows. - [COMMAND_EXECUTION]: The skill includes Python and Node.js server scripts (
server.pyandserver.mjs) designed for local deployment by the user. These scripts incorporate security measures including binding exclusively to the loopback address (127.0.0.1), validating theHostheader, and requiring a session-specific token for all data-writing operations.
Audit Metadata