threat-model-analyst
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external system architectures, data flows, and code snippets to generate threat models. This creates an attack surface where malicious input within the analyzed documentation could attempt to influence the agent's findings or bias the report.
- Ingestion points: Instructions guide the agent to read system descriptions and code to identify components and trust boundaries (SKILL.md).
- Boundary markers: The skill does not explicitly instruct the agent to use delimiters or ignore instructions embedded in the content being analyzed.
- Capability inventory: The skill's functionality is limited to text-based reporting; it does not request or utilize tools for network access, file system writes, or command execution.
- Sanitization: No specific instructions for sanitizing or escaping external content are provided.
Audit Metadata