variant-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external source code to identify security vulnerabilities. This behavior introduces a surface for indirect prompt injection, where malicious instructions embedded in the codebase being audited (e.g., within comments, string literals, or documentation) could influence the agent's behavior during the analysis process.
- Ingestion points: The agent reads and processes external files using tools like ripgrep, Semgrep, and CodeQL.
- Boundary markers: The skill lacks instructions for the agent to treat analyzed code as untrusted data or to use specific delimiters to separate code content from its own internal instructions.
- Capability inventory: The skill utilizes shell execution for searching (ripgrep) and creates detailed reports, which could be manipulated by an injection attack.
- Sanitization: There are no requirements or methods specified for sanitizing the content of analyzed files before the agent interprets them.
Audit Metadata