analyze-external-methods
Pass
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's operations are limited to reading and writing local files within the '.opentaint' directory, which is consistent with its stated purpose of managing security scan metadata. No malicious activities, obfuscation, or unauthorized access to sensitive files were detected.
- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface because it ingests data from external scan results. 1. Ingestion points: Reads from '.opentaint/results/dropped-external-methods.yaml'. 2. Boundary markers: None specified; the agent processes input data directly. 3. Capability inventory: The skill writes YAML configuration files to the '.opentaint/tracking/' directory. 4. Sanitization: No explicit sanitization or validation of the input method names or package strings is mentioned.
Audit Metadata