auditing-access-control
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a vulnerability surface for indirect prompt injection because it is designed to ingest and process untrusted data from external codebases and configuration files.
- Ingestion points: Instructions in
SKILL.mddirect the agent to scan IAM policies, RBAC configurations, ACL definitions, and API route handlers usingGlob,Grep, andReadtools. - Boundary markers: There are no explicit instructions or delimiters defined to prevent the agent from following malicious commands that might be embedded within the files being audited.
- Capability inventory: The skill is granted access to powerful tools including
Bash,Read,Write, andEdit, which could be abused if the agent is successfully injected. - Sanitization: The skill does not implement sanitization or validation of the content read from the target codebase before processing it.
Audit Metadata