contract-validation
Pass
Audited by Gen Agent Trust Hub on Aug 2, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill processes external source code files which creates a surface for indirect prompt injection if the files being analyzed contain malicious instructions.
- Ingestion points: Source code files located in
backend/(*.py, .ts) andsrc/(.ts) are read via search commands. - Boundary markers: The skill does not define specific delimiters or instructions to ignore instructions embedded within the code comments or strings of the files being analyzed.
- Capability inventory: The skill uses shell commands (
grep) to search the filesystem. - Sanitization: No sanitization or filtering is applied to the content discovered in the source files before the agent processes it.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands (
grep) to identify API routes and frontend service calls. These are standard, read-only search operations used for code validation.
Audit Metadata