owasp-checker
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided code and workflows for security vulnerabilities, which constitutes an ingestion point for untrusted data.
- Ingestion points: Processes user-supplied requests and project context to identify OWASP vulnerabilities.
- Boundary markers: The instructions do not define specific delimiters or instructions to ignore embedded malicious payloads within the data being analyzed.
- Capability inventory: The skill is primarily focused on generating textual security reports and implementations, with no explicit file-write or network-access capabilities defined in the instructions.
- Sanitization: No specific sanitization or filtering logic is provided to handle potentially malicious instructions embedded in the code being checked for vulnerabilities.
Audit Metadata