weak-password-hashing-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides documentation on cryptographic best practices and does not contain malicious instructions or hidden payloads.
- [NO_CODE]: There are no executable scripts, installers, or remote code download commands present in the skill.
- [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for reviewing external code, creating an attack surface for indirect prompt injection. 1. Ingestion points: Code snippets or files provided to the agent for review as described in SKILL.md. 2. Boundary markers: No delimiters are specified to isolate the code being reviewed. 3. Capability inventory: No specific tools or scripts are included in the skill. 4. Sanitization: No instructions for sanitizing or escaping the reviewed code are provided. However, the risk is negligible as the skill lacks automated execution capabilities.
Audit Metadata