thermos
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external data such as pull request diffs and file excerpts.
- Ingestion points: The workflow involves gathering diffs and file context from branches or pull requests (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or specific markers to isolate the untrusted code content from the agent's instructions.
- Capability inventory: The skill coordinates two subagents for bug, security, and code quality analysis and synthesizes their results.
- Sanitization: The instructions do not describe any sanitization, escaping, or filtering of the code content before it is processed by the subagents.
Audit Metadata