ssrf
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes project source code as input, which establishes a potential surface for indirect prompt injection if the files being audited contain instructions intended to manipulate the agent's behavior.
- Ingestion points: Project source code files identified by the scope and filtering logic.
- Boundary markers: The workflow does not explicitly define delimiters to isolate external file content from the analysis prompts.
- Capability inventory: The skill can read local files, execute local security scanning tools, and generate audit reports.
- Sanitization: No explicit content sanitization is performed as the skill is intended for static analysis of source code.
Audit Metadata