artillery-config-generator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user requests related to performance testing to generate configurations and code, which constitutes an ingestion surface for untrusted data. 1. Ingestion points: User requests triggered by phrases like "artillery config generator" (SKILL.md). 2. Boundary markers: Absent. 3. Capability inventory: The skill has access to Bash, Read, Write, and Edit tools, which could be misused if injected instructions are followed. 4. Sanitization: None explicitly described in the skill instructions.
- [SAFE]: The skill's stated purpose aligns with its behavior. No evidence was found of obfuscation, credential exfiltration, persistence mechanisms, or unauthorized remote code execution.
Audit Metadata