express-security-scan
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data in the form of Express.js source code (e.g., from
routes/,controllers/, andapi/directories). This represents an attack surface for indirect prompt injection where malicious instructions could be embedded in the code being scanned. - Ingestion points: Source code files analyzed by the agent, specifically routes, controllers, and middleware definitions.
- Boundary markers: The skill does not specify explicit delimiters or instructions to ignore instructions embedded within the code it scans.
- Capability inventory: The skill functions as an instructional guide for auditing and does not include capabilities for network exfiltration, file system writes, or subprocess execution.
- Sanitization: There is no defined sanitization or filtering for the external code content before it is processed by the LLM.
- [SAFE]: The skill provides legitimate defensive auditing guidelines based on official documentation from Express.js and the OWASP Foundation. The examples provided (e.g., showing path traversal or insecure JWT verification) are clearly labeled as incorrect patterns for the purpose of identification and remediation, which is a standard practice for security tooling.
Audit Metadata