programming
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill promotes security hygiene by integrating automated static analysis (Checkov) for infrastructure code and requiring justification for security suppressions.
- [SAFE]: It includes explicit safeguards against insecure environment configurations, specifically instructing the agent not to use Nix insecure package overrides to bypass CVE warnings.
- [EXTERNAL_DOWNLOADS]: The skill references standard development and security tools including checkov, ruff, uv, and various nixpkgs utilities. These are well-known industry tools used for their primary purposes.
- [INDIRECT_PROMPT_INJECTION]: The skill processes repository files (code, configurations, and plans) which constitutes a surface for indirect prompt injection. This is an inherent property of a programming skill and is addressed through systematic verification steps and integrated security scanning.
Audit Metadata