skills/jeremylongshore/tons-of-skills-marketplace/finding-security-misconfigurations/Gen Agent Trust Hub
finding-security-misconfigurations
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data which could contain instructions designed to influence the agent's behavior.
- Ingestion points: Scans infrastructure-as-code files (.tf, .yaml, .json), application configurations (.env, .yml, .json), and container/web server definitions located in the skill directory.
- Boundary markers: The instructions do not define clear delimiters or provide the agent with specific 'ignore' directives for content within the scanned files.
- Capability inventory: The skill utilizes tools such as Read, Write, Edit, and Bash, which increases the potential impact if an injection attack were successful.
- Sanitization: There is no evidence of content sanitization or validation to prevent the agent from interpreting embedded instructions as its own commands.
Audit Metadata