pentest-authentication-authorization-review
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze authentication tokens, session data, and API responses from external systems, which inherently involves processing untrusted data.
- Ingestion points: API responses, session tokens, and identity role data from target systems (SKILL.md).
- Boundary markers: Absent; no specific delimiters are defined to separate untrusted data from the agent's core instructions.
- Capability inventory: The skill contains no executable code, subprocess calls, or network operations; its capabilities are restricted to instructional reasoning and delegation to other workflows (SKILL.md).
- Sanitization: No explicit sanitization or validation of target data is mentioned in the instructions.
Audit Metadata