csrf-protection-validator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection as it is designed to process untrusted user requests regarding security patterns and generate code using powerful tools.
- Ingestion points: Processes user requests and queries related to "csrf protection validator" as described in the activation triggers in SKILL.md.
- Boundary markers: No explicit delimiters or instructions are provided to the agent to treat user-provided data as untrusted or to ignore embedded instructions.
- Capability inventory: The skill is configured with Read, Write, Grep, and Bash tools as specified in the YAML frontmatter of SKILL.md.
- Sanitization: The skill lacks instructions for validating, escaping, or sanitizing user-provided content before it is processed or used in code generation.
- [NO_CODE]: The skill consists exclusively of a markdown instruction file (SKILL.md) and does not include any executable scripts, binary files, or external code dependencies.
Audit Metadata