mantis-advise
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill invokes a Python script located at reference/scripts/advise.py to analyze target files and query a local SQLite database. This behavior is standard for the skill's intended purpose.
- Indirect Prompt Injection Surface: The advisor ingests and analyzes external source code and database records. While this creates a potential surface for indirect prompt injection, the skill's instructions emphasize secure boundary enforcement and validation protocols to mitigate these risks in the development process.
Audit Metadata