python-pro
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and review user-provided Python code and project requirements, which creates a natural surface for indirect prompt injection attacks where malicious instructions could be embedded in the code being analyzed.
- Ingestion points: User-provided code snippets, requirements documents, and project configurations passed to the agent during interaction.
- Boundary markers: None explicitly defined in the skill instructions to separate user data from system instructions.
- Capability inventory: The skill possesses capabilities for complex task execution including code generation, setting up testing frameworks, designing production environments (Docker/K8s), and performance profiling.
- Sanitization: No specific sanitization or validation steps for user-provided code inputs are outlined in the instructions.
Audit Metadata