security-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill audits user-provided code, creating a surface for indirect prompt injection where malicious instructions could be embedded in audited files.
- Ingestion points: Untrusted code snippets and project files provided to the agent for auditing as described in the Instructions section.
- Boundary markers: Absent; the skill does not specify delimiters or instructions to ignore instructions found within audited code.
- Capability inventory: Standard file access and terminal capabilities available to the agent.
- Sanitization: Absent; no input validation or filtering of instructions within code files is mentioned.
- [SAFE]: The skill contains no executable code, network operations, persistence mechanisms, or obfuscated content. Metadata and external links are consistent with the provided vendor context.
Audit Metadata