codeguard-cve
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external dependency metadata and vulnerability reports which represents an attack surface for indirect prompt injection if malicious content is embedded in package manifests or CVE databases. However, the risk is mitigated by the skill's requirement for structured evidence and its focus on deterministic security scanning tools.\n
- Ingestion points: Dependency lockfiles (e.g., package-lock.json, pom.xml) and external vulnerability database reports ingested during the scanning process (SKILL.md Step 1).\n
- Boundary markers: The skill emphasizes the use of structured JSON output and factual reporting to maintain context integrity (SKILL.md Step 3).\n
- Capability inventory: The skill utilizes subprocesses to execute external scanning binaries (mvn, npm, trivy, cargo-audit, pip-audit) and can perform automated dependency fixes (SKILL.md Capability Boundaries).\n
- Sanitization: The skill relies on the output parsing of established third-party security tools; no specific sanitization or escaping logic is defined for the agent's interpretation of these reports.
Audit Metadata