qstack-libero
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository code and performs file edits, creating an attack surface where malicious instructions in the code could attempt to influence the agent.
- Ingestion points: The skill reads the finished work (source code) within the user's workspace as specified in SKILL.md.
- Boundary markers: Present. The skill explicitly directs the agent to never cut validation at a trust boundary, error handling that prevents data loss, security, accessibility, or a documented repository invariant.
- Capability inventory: The skill is authorized to perform file edits to delete or simplify code within the user's scope.
- Sanitization: Absent. No specific technical sanitization is applied to the code content before analysis.
Audit Metadata