python-anti-patterns
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [CREDENTIALS_UNSAFE]: The skill includes a mock API key (
sk-12345) in a code snippet explicitly labeled as a 'BAD' practice. While intended for educational purposes, it matches pattern signatures for sensitive data. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and review untrusted Python code, creating a potential injection vector. • Ingestion points: Reviewing user-provided code or legacy implementations. • Boundary markers: The skill does not provide instructions to the agent to treat the reviewed code as data rather than instructions. • Capability inventory: The agent typically has access to default file system and network tools. • Sanitization: No input validation or filtering is specified for the code being analyzed.
Audit Metadata