flow-deps
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill directs the agent to process data from external, untrusted sources such as changelogs, migration guides, and registry data, creating a surface for indirect prompt injection attacks.
- Ingestion points: External registry/vendor data, changelogs, and migration guides mentioned in the workflow (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or provide directives to ignore embedded instructions within the ingested data.
- Capability inventory: The skill enables the agent to modify project manifests and lockfiles via package managers and to execute behavior checks (SKILL.md).
- Sanitization: There is no requirement for sanitizing, validating, or filtering the content retrieved from external sources before the agent acts upon it.
Audit Metadata