dev-loop-security-auditor
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation and implementation patterns reference the use of reputable third-party security tools and GitHub Actions from trusted organizations like Snyk and Aqua Security.
- [PROMPT_INJECTION]: The skill's primary purpose of auditing external code and logs creates an inherent surface for indirect prompt injection. This risk is acknowledged as part of the tool's intended use case.
- Ingestion points: File reading logic in
SKILL.mdfor analyzing audited projects. - Boundary markers: No specific delimiters or safety warnings for audited content are present in the provided templates.
- Capability inventory: Execution of local security tools via subprocess.
- Sanitization: Methodology relies on manual triage and results verification.
Audit Metadata