status
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the .appsec/ directory to generate its status report.\n
- Ingestion points: Reads findings, scan metadata, and configuration from .appsec/findings.json, .appsec/last-run.json, and .appsec/config.yaml (SKILL.md).\n
- Boundary markers: Absent; there are no instructions to delimit or ignore potential malicious content within the ingested data.\n
- Capability inventory: The skill has read access to the local filesystem and executes the git command-line tool (SKILL.md).\n
- Sanitization: Absent; the skill does not specify validation or sanitization for the data retrieved from the state files.
Audit Metadata