non-repudiation-privacy
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill contains purely instructional content for evaluating source code for privacy risks. It does not include scripts, request specific tool permissions, or include any obfuscated content or credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for analyzing external source code files, which is an ingestion point for untrusted data. However, the risk is evaluated as safe because the skill lacks the dangerous capabilities (such as network access or file system modification) required for an injection to be exploited.
- Ingestion points: Source code files scoped in Step 1 and read in Step 2.
- Boundary markers: None identified in the markdown instructions.
- Capability inventory: No file writing, network access, or command execution capabilities are defined within the skill.
- Sanitization: No sanitization of ingested file content is specified.
Audit Metadata