threat-modeling
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely documentation-based, providing instructions and examples for threat modeling. It does not include any scripts, executable binaries, or tool configurations that could be used for malicious purposes.
- [EXTERNAL_DOWNLOADS]: The skill contains references to documentation and policies hosted on the vendor's official GitHub repository (
github.com/Hack23/ISMS-PUBLIC). These links are for informational purposes and target the vendor's own public resources. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided system architectures and data flow diagrams. While this represents a data ingestion surface, the skill lacks any active capabilities or tools that could be exploited through malicious data.
- Ingestion points: System descriptions, architecture details, and DFD components provided by the user for threat analysis.
- Boundary markers: None explicitly defined; relies on standard markdown formatting for context separation.
- Capability inventory: None. The skill contains no executable code or external tool calls.
- Sanitization: Not applicable as the skill does not perform actions beyond text analysis.
Audit Metadata