django-access-review
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted codebase files, which presents a surface for indirect prompt injection where malicious content in analyzed files could attempt to influence the agent. 1. Ingestion points: The skill uses
GrepandReadtools on Python source files. 2. Boundary markers: No delimiters are specified for the ingested content. 3. Capability inventory: The skill usesBash,Task, and local file tools. 4. Sanitization: There is no pre-processing or sanitization of the source code before analysis. - [COMMAND_EXECUTION]: The skill uses
Bashto executegrepsearch commands on local files. This behavior is consistent with the skill's purpose and does not involve network activity or privileged access.
Audit Metadata