skill-security

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references an external repository, fatih-developer/fth-skills, for the purpose of downloading the canonical version of the security auditor tool.
  • [COMMAND_EXECUTION]: The documentation provides an installation command template using npx to install additional skills from the author's repository. This is a standard installation procedure for the platform.
  • [INDIRECT_PROMPT_INJECTION]: As a security auditing tool, the skill is designed to ingest and process third-party skill content, which creates a surface for indirect prompt injection attacks where malicious code in the analyzed file could attempt to influence the auditor's output.
  • Ingestion points: Reads and analyzes the content of other AI agent skills provided by the user.
  • Boundary markers: None explicitly defined in this alias file; it delegates complex analysis to the canonical auditor skill.
  • Capability inventory: The skill itself contains no privileged capabilities like network writing or file system modification; it only performs analysis and reporting.
  • Sanitization: No specific sanitization or escaping mechanisms are described in the instructions for this alias.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 10:52 PM