security-bounty-hunter
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted third-party source code from external repositories, which serves as an entry point for potential indirect prompt injection attacks where malicious code could contain instructions aimed at the agent. \n
- Ingestion points: Source code from external repositories (SKILL.md).\n
- Boundary markers: None specified; the skill does not explicitly instruct the agent to ignore natural language instructions found within the code being analyzed.\n
- Capability inventory: The skill utilizes shell command execution (e.g., semgrep) and file system read capabilities.\n
- Sanitization: Not explicitly mentioned in the workflow.
Audit Metadata