security-audit
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (project source code, documentation, and git history) and possesses significant capabilities (shell command execution and file system write access) that could be targeted by adversarial instructions embedded in audited files.\n
- Ingestion points: The skill reads project configuration files, source code files, and documentation (e.g., README.md, CLAUDE.md) as described in
SKILL.md(Steps 1, 3, 4, and 6).\n - Boundary markers: Absent. No explicit instructions or delimiters are provided to the agent to prevent it from obeying commands or instructions that might be hidden in the analyzed code or comments.\n
- Capability inventory: Shell execution for multiple security tools (
git,gitleaks,semgrep,trivy,govulncheck,npm audit,trufflehog) and file system write access for generating theSECURITY_AUDIT.mdreport.\n - Sanitization: Absent. The skill does not implement explicit sanitization or escaping of the ingested file content before it is evaluated by the agent.\n- [COMMAND_EXECUTION]: The skill relies on the execution of several external command-line tools to perform its auditing functions. While these tools (
gitleaks,semgrep,trivy, etc.) are industry-standard scanners, their execution is triggered directly by the skill instructions within the shell environment.
Audit Metadata