security-scanner
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted source code, which creates a potential surface where malicious instructions embedded in code or comments could influence the agent's behavior.
- Ingestion points: Source code files read using the Read, Grep, and Glob tools as specified in SKILL.md.
- Boundary markers: Absent; there are no specific markers or instructions to treat scanned content as untrusted data or to ignore instructions within it.
- Capability inventory: The skill utilizes Bash for auditing and maintains general file system access via Read/Grep.
- Sanitization: Absent; the code content is processed directly by the agent without escaping or validation.
- [COMMAND_EXECUTION]: The skill executes shell commands to perform dependency security audits.
- Evidence: Uses the Bash tool to run npm audit, pip-audit, and cargo audit as described in the Phase 3 instructions of SKILL.md.
Audit Metadata