spoofing
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill is a structured markdown guide describing a workflow for identifying identity spoofing risks (STRIDE category S). It consists of checklist items, grep patterns for common vulnerabilities, and reporting guidelines without any functional scripts, remote downloads, or credential exfiltration patterns.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for the agent to ingest and analyze external source code. Evidence: 1. Ingestion points: Target files resolved via analysis flags (SKILL.md). 2. Boundary markers: Not specified within the text. 3. Capability inventory: Reading file contents and generating audit reports (SKILL.md). 4. Sanitization: Not explicitly addressed in the workflow, which is consistent with instructional content for static analysis.
Audit Metadata