grasp-knowledge
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as a documentation repository for software design patterns. All code examples and command-line snippets are standard practices for architectural auditing and code quality assessment.
- [INDIRECT_PROMPT_INJECTION]: The skill encourages the agent to audit project source code using shell commands, which presents an attack surface for indirect prompt injection if the audited code contains malicious instructions. However, the risk is negligible as the skill is purely informational and does not process untrusted data automatically.
- Ingestion points: PHP source code files identified via the provided search patterns in SKILL.md and references/antipatterns.md.
- Boundary markers: Absent; the agent processes raw results from search tools without explicit delimiters defined in the skill.
- Capability inventory: Shell execution (grep, find, awk, wc) used for code metrics in SKILL.md and references/antipatterns.md.
- Sanitization: Not applicable for documentation content that provides patterns rather than automated processing.
Audit Metadata