security-files-integrations-review

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted external content such as pull requests and source code, which could potentially harbor malicious instructions.
  • Ingestion points: The process involves inspecting code changes, data flows, and pull request content (as defined in SKILL.md and references/01-files-and-integrations.md).
  • Boundary markers: The skill instructions do not explicitly define specific delimiters or instructions for the agent to ignore embedded commands within the code it reviews.
  • Capability inventory: Based on the provided files, the skill's actions are limited to reviewing, reporting, and recommending security controls, with no evidence of dangerous tool execution or file system write capabilities.
  • Sanitization: There are no specific sanitization or filtering steps mentioned for the untrusted data being processed.
  • [NO_CODE]: The skill consists entirely of markdown documentation and YAML configuration files. No executable scripts (Python, JavaScript, etc.) are included in the skill package.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 02:31 PM
Security Audit — agent-trust-hub — security-files-integrations-review