incu-way-security-validation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands including
git(switch, pull, fetch, worktree) andmkdirto manage the local environment and isolate security audit activities. These commands are standard for repository management and follow established Git workflows. - [INDIRECT_PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because its core function involves reading and analyzing untrusted source code, diffs, and project documentation from the local repository. This is an inherent risk factor for code review tools.
- Ingestion points: The tool reads target source code, module files, current branch diffs, and existing security documentation such as threat models and
CLAUDE.mdinstructions. - Boundary markers: No explicit delimiters or instructions are used to isolate ingested code content from the agent's internal reasoning instructions.
- Capability inventory: The skill can execute Git operations (branching, worktrees), create directories, write files to the local documentation folder, and suggest the invocation of other PR preparation tools.
- Sanitization: The instructions do not specify any validation, filtering, or escaping of the code content before it is processed by the agent.
Audit Metadata