snyk-remediation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes standard development tools such as
gitfor branch and worktree management, andpnpmfor package installation, linting, and testing. It also invokes specific MCP tools (snyk_trust,snyk_code_scan,snyk_sca_scan) and a vendor-specific utility (incu-way-prepare-pr). These operations are consistent with the skill's primary purpose of managing security remediations. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data, specifically source code and Snyk scan findings, which could potentially contain malicious prompts. The design mitigates this surface through a mandatory evidence chain and human oversight:
- Ingestion points: Snyk scan results are ingested into the agent context in Phase 0 (SKILL.md).
- Boundary markers: The process is segmented into distinct phases with clear headers and mandatory user confirmation steps (Gates 1, 2, and 3) (SKILL.md).
- Capability inventory: The skill has the capability to write to the file system, execute git commands, and run package manager scripts (SKILL.md).
- Sanitization: The skill relies on human-in-the-loop validation, requiring user approval of the scope, the remediation plan, and the final resolution report before any changes are finalized.
- [SAFE]: No obfuscation, unauthorized data access, persistence mechanisms, or credential harvesting patterns were found. The use of vendor-specific tools aligns with the provided author context.
Audit Metadata