do-bitter-pill
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to read and analyze instructions from files like
AGENTS.md,CLAUDE.md, and other repository-level configuration files. This creates a surface where malicious instructions embedded in those files could attempt to influence the agent's behavior during the audit process. - Ingestion points: Processes content from
AGENTS.md,CLAUDE.md, skill manifests, and other repository instruction files identified during discovery. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are specified in the workflow.
- Capability inventory: The skill reads file hierarchies and reports summaries. It includes a capability to edit files, though this is restricted by a guardrail requiring explicit user consent.
- Sanitization: The skill does not implement specific sanitization or filtering for the content it audits, as the analysis of the raw text is the intended purpose.
Audit Metadata