padding-oracle-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [NO_CODE]: The skill consists entirely of documentation and code examples within markdown blocks. It does not include any executable scripts or configuration files that the agent would run directly.
- [INDIRECT_PROMPT_INJECTION]: The instructions direct the agent to evaluate code provided by a user, which defines a data ingestion surface for untrusted content.
- Ingestion points: User-provided decryption code and error handling logic (SKILL.md).
- Boundary markers: None explicitly defined to separate instructions from user code.
- Capability inventory: The skill has no active capabilities such as network requests, file writes, or command execution.
- Sanitization: Not applicable as the content is for analysis rather than execution.
- [EXTERNAL_DOWNLOADS]: The documentation includes links to reputable security references (OWASP, CWE, Wikipedia) and mentions third-party tools for testing, which are standard for educational security content.
Audit Metadata