stream-chain

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines a framework for multi-step processing pipelines that ingest data from potentially untrusted sources as part of its core functionality. 1. Ingestion points: Data extracted from API responses and CSV files, plus custom prompts and configuration in .claude-flow/config.json and SKILL.md. 2. Boundary markers: The documentation does not specify the use of delimiters or 'ignore' instructions for interpolated data between chain steps. 3. Capability inventory: The skill facilitates prompt chaining, data transformation, and codebase analysis using the claude-flow CLI tool. 4. Sanitization: No explicit sanitization or validation of the ingested content is described within the skill instructions.
  • [SAFE]: No malicious behavior, data exfiltration, or obfuscation was found. The skill instructions follow standard workflow automation patterns and use local paths for configuration and session memory.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 09:15 AM