info-disclosure
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted source code and configuration files, which creates a potential surface for indirect prompt injection if the analyzed files contain malicious instructions.
- Ingestion points: Source code files, API response builders, error handlers, logs, and configuration files identified during the scope determination phase (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or specific markers to isolate ingested code from the agent's primary instructions.
- Capability inventory: The skill involves reading file contents and generating detailed security reports based on the analyzed data (SKILL.md).
- Sanitization: There is no mention of sanitization, filtering, or escaping of the content read from target files before it is processed by the agent.
Audit Metadata