ivangrynenko-cursorrules-drupal
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is a defensive tool designed to improve software security. It provides structured guidance and regex-based patterns to audit Drupal code for OWASP Top 10 vulnerabilities, including authentication failures, cryptographic issues, and server-side request forgery (SSRF).
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted code files, which constitutes a potential attack surface for indirect prompt injection.
- Ingestion points: Drupal project files (e.g.,
*.php,*.module,*.install,*.yml) provided by the user in the working directory. - Boundary markers: None explicitly defined in the skill logic to separate code from analysis instructions.
- Capability inventory: The skill provides diagnostic feedback and secure coding suggestions; it does not include capabilities for file modification, network operations, or shell command execution during the analysis phase.
- Sanitization: Not applicable, as the skill does not execute the code it analyzes.
Audit Metadata