scanning-for-secrets
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze untrusted data from a codebase, creating a surface for indirect prompt injection if malicious instructions are embedded in the scanned files.
- Ingestion points: The skill performs recursive scans of project directories (scripts/scan_directory.py), including source code and configuration files like .env or database.yml.
- Boundary markers: There are no explicit instructions or delimiters defined in the instructions to prevent the agent from following instructions found within the data it scans.
- Capability inventory: The skill possesses significant capabilities including file system access (Read, Write, Edit) and shell execution (Bash), which could be leveraged if an injection is successful.
- Sanitization: The documentation does not specify methods for sanitizing or escaping the content of scanned files before processing.
Audit Metadata