generating-grpc-services
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external Protocol Buffer (.proto) files and API specifications which could serve as a vector for indirect prompt injection if those files contain malicious instructions hidden in comments or metadata.
- Ingestion points: SKILL.md and references/implementation.md instruct the agent to use the 'Read' and 'Glob' tools to examine existing .proto files and API specifications.
- Boundary markers: None identified. The instructions do not explicitly tell the agent to ignore or delimit instructions found within the input files.
- Capability inventory: The skill has extensive capabilities including 'Write' and 'Edit' for code generation, and 'Bash' for command execution, creating a path for malicious data to influence the environment.
- Sanitization: No sanitization or validation of the content within the ingested files is specified.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of standard gRPC development tools and libraries.
- Evidence: The implementation examples in references/examples.md include commands for installing '@grpc/grpc-js' and '@grpc/proto-loader' via npm, and 'grpcio-tools' via Python.
- Source: These are official packages from well-known package registries (NPM and PyPI).
Audit Metadata