ecc-tools-cost-audit
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill defines a workflow that ingests data from the ECC-Tools repository, including webhook handlers, queue logic, and PR content, which creates a surface for indirect prompt injection.
- Ingestion points: Event data and source code files from the ECC-Tools repository (e.g., src/index.*).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' warnings for the data being audited.
- Capability inventory: The workflow utilizes code searching, file reading, and potential code modification tools to implement fixes.
- Sanitization: No explicit content filtering or validation of the audited repository content is described.
Audit Metadata