hack23-isms-compliance

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides structured guidelines for repository security compliance and does not contain any malicious code or instructions. External references target the author's official repositories or well-known security standards.\n- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the review of documentation in target repositories, which represents an ingestion surface for potentially untrusted data.\n
  • Ingestion points: Repository files such as SECURITY_ARCHITECTURE.md, THREAT_MODEL.md, and architectural documentation files (e.g., ARCHITECTURE.md, DATA_MODEL.md).\n
  • Boundary markers: None explicitly defined within the skill instructions to delimit repository content from agent instructions.\n
  • Capability inventory: The skill identifies and documents security controls but does not define specific tool execution or shell access within its own logic.\n
  • Sanitization: No explicit sanitization or input validation logic is described for the content being reviewed.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 11:41 PM