auth
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill functions as a security auditor, using tools like semgrep, bandit, gosec, and gitleaks to detect vulnerabilities such as weak hashing and session management issues. No exfiltration or unauthorized access behaviors were detected.
- [INDIRECT_PROMPT_INJECTION]: The skill audits untrusted code, which is its primary purpose. This creates a potential surface for indirect prompt injection. 1. Ingestion points: Local source code files. 2. Boundary markers: None. 3. Capability inventory: Reading files and running local scanners. 4. Sanitization: Pattern matching and manual logic.
Audit Metadata