kafka-producer-consumer
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONNO_CODE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides functionality for consuming messages from Kafka, which represents a significant ingestion point for untrusted external data. This design is susceptible to indirect prompt injection if an attacker-controlled message contains hidden instructions.
- Ingestion points: Kafka consumer tasks and patterns described in
SKILL.md. - Boundary markers: None identified; the instructions do not specify the use of delimiters or "ignore" instructions for external data.
- Capability inventory: The skill is configured with broad tool access including
Bash(cmd:*),Write, andEdit(specified in YAML frontmatter). - Sanitization: None identified; there are no instructions for sanitizing, validating, or escaping data received from Kafka before it is used in the agent's context.
- [NO_CODE]: The analyzed skill contains only markdown documentation and does not include any accompanying scripts, binaries, or external code dependencies.
Audit Metadata