analyzing-dependencies
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from external package manifests and security advisories, which could potentially contain malicious instructions targeting the agent. \n
- Ingestion points: The skill reads package names, versions, and descriptions from manifest files (package.json, requirements.txt, etc.) and JSON outputs of auditing tools (npm audit, pip-audit, etc.) processed in
scripts/vulnerability_report_parser.pyandscripts/license_compliance_checker.py. \n - Boundary markers: Instructions do not specify delimiters or techniques to isolate untrusted tool output from the agent's core instructions. \n
- Capability inventory: The skill is configured with
Bash,Write,Edit, andReadtools, providing a surface for actions if an injection were successful. \n - Sanitization: No explicit sanitization or filtering of external data is performed before it is interpolated into the reports presented to the agent.
Audit Metadata