xpath-injection-anti-pattern
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a documentation-only resource providing educational content on XPath injection vulnerabilities. It correctly identifies security anti-patterns and provides remediation guidance. The code examples provided are for illustrative purposes to demonstrate vulnerable versus secure coding practices and do not contain malicious instructions or executable backdoors.
- [SAFE]: External references point to reputable security organizations such as OWASP, MITRE (CWE/CAPEC), and a relevant GitHub repository (Arcanum-Sec/sec-context), facilitating safe security research and documentation practices.
- [SAFE]: No hidden content, obfuscation, or unauthorized access patterns were detected. The skill's behavior is consistent with its stated purpose of providing security context for code reviews and development.
Audit Metadata