security-best-practice
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user source code as part of its primary auditing function, which creates a potential surface for indirect prompt injection if the ingested code contains malicious instructions.
- Ingestion points: Local project files, including framework configurations (
package.json,go.mod, etc.) and authentication route handlers, as specified in Step 1 ofSKILL.md. - Boundary markers: Absent. The instructions do not define specific delimiters or warnings to separate untrusted code content from the agent's audit instructions.
- Capability inventory: The skill is designed to read project files for analysis and apply security fixes directly to the codebase (Step 3 and Step 4).
- Sanitization: Absent. The skill analyzes code directly to identify patterns; it does not specify sanitization or escaping of the input data before evaluation.
Audit Metadata