secrets
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's manual analysis workflow (Step 4: Claude Analysis) requires the agent to read and process the contents of arbitrary files from the target repository, which could contain malicious instructions designed to influence the agent.
- Ingestion points: All files resolved in the scope (including source code, configuration files, scripts, and environment files) are read into the agent's context during Step 4 in
SKILL.md. - Boundary markers: The instructions do not specify the use of clear delimiters or instructions to ignore potential commands embedded within the analyzed file content.
- Capability inventory: The skill can execute shell commands (specifically security scanners like
gitleaks,trufflehog, andtrivy) and perform comprehensive filesystem reads. - Sanitization: There is no evidence of content sanitization or escaping performed on the external data before it is presented to the agent for analysis.
Audit Metadata