supply-chain-risk-auditor
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: The skill was analyzed for indirect prompt injection risks as it processes external data from GitHub repositories to perform its security assessment.
- Ingestion points: Project dependency lists and repository metadata (such as README files and issue descriptions) retrieved via the
ghCLI tool. - Boundary markers: No specific delimiters are defined to isolate external text content, though the workflow follows a strict template for report generation.
- Capability inventory: The skill uses
Bash,Read,Write,Glob, andGreptools to manage project files and execute audit commands. - Sanitization: Includes a normalization step for repository URLs but does not explicitly sanitize raw text from external repository files.
Audit Metadata