cookie-security-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes user-provided cookie data and security configurations that could contain embedded malicious instructions.
- Ingestion points: The skill ingests and analyzes data provided in user prompts or external configurations related to cookies (SKILL.md).
- Boundary markers: The instructions do not define explicit delimiters or instructions for the agent to differentiate between user data and operational commands.
- Capability inventory: The skill environment allows access to
Read,Write,Grep, andBash(npm:*)tools, providing a significant capability surface if an injection occurs. - Sanitization: There are no procedures defined in the skill to sanitize, escape, or validate the security data before it is processed or used to generate outputs.
Audit Metadata