northstar-rust-audit
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external content from a user-specified worktree or repository scope to perform audits and repairs, creating a potential surface for instructions embedded in data to influence agent behavior.
- Ingestion points: Text provided after the command trigger
/northstar-rust-auditinSKILL.mdis treated as the target scope. - Boundary markers: The instructions do not specify any delimiters or warnings for the agent to ignore instructions that might be embedded in the target Rust codebase (e.g., within comments or documentation).
- Capability inventory: The skill is designed to perform file reads and writes ("audit and repair") across the entire target scope, providing the agent with write access to the filesystem based on the processed data.
- Sanitization: There is no mention of sanitization, escaping, or validation of the content being audited before it is processed by the agent.
Audit Metadata