ldap-injection-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill serves as a security education guide for identifying and mitigating LDAP injection vulnerabilities. The 'vulnerable' code segments are clearly labeled as anti-patterns for demonstration purposes.
- [NO_CODE]: The skill contains only documentation and static code examples; it does not include any executable scripts, binaries, or background processes.
- [EXTERNAL_DOWNLOADS]: The content references reputable security documentation and resources, including OWASP cheat sheets, CWE definitions, and a GitHub repository for security context (Arcanum-Sec/sec-context).
- [INDIRECT_PROMPT_INJECTION]: The skill presents a data ingestion surface for the agent.
- Ingestion points: Content within SKILL.md.
- Boundary markers: None; the content is presented as standard markdown.
- Capability inventory: None detected; the skill does not define or invoke any tools for file system access, network operations, or command execution.
- Sanitization: Not applicable, as the skill does not handle dynamic runtime input.
Audit Metadata