windsurf-license-management
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external configuration and reporting files, which creates a potential attack surface for indirect prompt injection if these data sources contain malicious instructions.
- Ingestion points: The skill reads from and manages several JSON files documented in
references/directory-structure.md, includinglicense-config.json,allocation-rules.json, andusage-policy.json. - Boundary markers: The instructions in
SKILL.mdandreferences/implementation.mddo not define delimiters or specific "ignore" instructions for the agent when parsing these configuration files. - Capability inventory: The skill utilizes
Read,Write, andEdittools, allowing it to modify the organization's configuration files and reports based on data it processes. - Sanitization: There are no explicit instructions for validating the schema or sanitizing the content of the JSON files before they are processed by the agent.
Audit Metadata