senior-backend
Pass
Audited by Gen Agent Trust Hub on Mar 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's metadata includes an installation command that uses curl to download the skill definition from a GitHub repository. GitHub is recognized as a well-known service for code and skill distribution.
- [PROMPT_INJECTION]: The skill facilitates the generation of backend components based on user-provided descriptions.
- Ingestion points: User specifications for database models, API structures, and domain logic (SKILL.md).
- Boundary markers: There are no explicit markers or instructions to isolate user-provided requirements from the core logic.
- Capability inventory: The skill references local Python scripts for scaffolding APIs and generating database migrations, which imply file system write capabilities (SKILL.md).
- Sanitization: No evidence of input sanitization or validation of user-provided specifications was found in the provided code templates.
Audit Metadata