basement-hacker
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill requires the agent to ingest and analyze untrusted implementation source code.
- Ingestion points: The instructions in SKILL.md direct the agent to read implementation and source code files.
- Boundary markers: There are no explicit instructions for the agent to use delimiters or ignore instructions that might be embedded within the analyzed source (e.g., within comments).
- Capability inventory: The skill encourages testing hypotheses, which utilizes the agent's native file-reading and command-execution capabilities.
- Sanitization: No sanitization or validation mechanisms are defined for the external source code being processed.
Audit Metadata