password-hash-generator
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest user requests regarding password generation and security configurations to produce production-ready code.
- Ingestion points: User input triggers based on keywords like "password", "generator", or "password hash generator" defined in the frontmatter and instructions of
SKILL.md. - Boundary markers: There are no explicit instructions or delimiters provided to the agent to treat user-provided data as untrusted or to ignore embedded instructions within that data.
- Capability inventory: The skill allows the agent to use
WriteandBash(specificallynpm), which provides a path for the agent to create and potentially execute the generated content. - Sanitization: The skill instructions do not specify any validation or sanitization steps for the user input before it is interpolated into code generation tasks.
Audit Metadata