pasta-decompose
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill consists of instructional content for performing threat modeling and does not include executable code, scripts, or network requests. All referenced files are local project dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze external artifacts such as source code, middleware configurations, and database schemas, which presents a surface for indirect prompt injection.
- Ingestion points: Project source code, middleware configurations, auth modules, and database schemas.
- Boundary markers: The instructions do not define specific delimiters or warnings to ignore instructions embedded in the analyzed files.
- Capability inventory: The skill is limited to analysis and documentation generation (Component Inventory, Role-Permission Matrix, Data Classification).
- Sanitization: No specific sanitization or filtering of input content is mentioned.
Audit Metadata