django-access-review

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted codebase files, which presents a surface for indirect prompt injection where malicious content in analyzed files could attempt to influence the agent. 1. Ingestion points: The skill uses Grep and Read tools on Python source files. 2. Boundary markers: No delimiters are specified for the ingested content. 3. Capability inventory: The skill uses Bash, Task, and local file tools. 4. Sanitization: There is no pre-processing or sanitization of the source code before analysis.
  • [COMMAND_EXECUTION]: The skill uses Bash to execute grep search commands on local files. This behavior is consistent with the skill's purpose and does not involve network activity or privileged access.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 08:41 AM