password-strength-analyzer
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data to generate code and configurations, creating a potential surface for indirect prompt injection findings.\n
- Ingestion points: User input provided during requests for password strength analysis (SKILL.md).\n
- Boundary markers: The skill instructions do not define delimiters or provide specific prompts to the agent to ignore instructions embedded within the analyzed data.\n
- Capability inventory: The skill is configured with access to
Read,Write,Grep, andBashtools, which could be leveraged if the agent inadvertently follows instructions hidden in user input (SKILL.md).\n - Sanitization: There are no specified sanitization or validation steps for user-provided strings before they are incorporated into generated outputs.
Audit Metadata