version-api
Warn
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONPROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
EXAMPLES.mdfile provides a code snippet for header-based versioning that uses.constantizeon a string derived from theAcceptrequest header. This pattern constitutes unsafe reflection and is explicitly forbidden by the skill's own safety guidelines inSKILL.md. It risks exposing internal application constants to external triggers.\n- [PROMPT_INJECTION]: The skill exhibits a safety bypass pattern where the reference implementation inEXAMPLES.mdcontradicts the 'HARD-GATE' security constraints defined inSKILL.md. By providing a 'forbidden' implementation as a helpful example, the skill may trick the AI agent into generating insecure code that bypasses its intended security filters.
Audit Metadata