environment-config-review
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external data including environment variables, configuration files, and feature flags. These sources are often attacker-controlled or externally sourced, which could contain malicious instructions designed to influence the agent's behavior during the review process.
- Ingestion points: Processes external environment variables, configuration files, secrets, and feature flags as defined in the
SKILL.mdworkflow. - Boundary markers: No explicit delimiters or boundary markers are defined in the instructions to separate untrusted configuration data from the system prompt.
- Capability inventory: The skill instructions are limited to analysis (inventory, review, check parity) and do not define any active file-write, network, or subprocess capabilities.
- Sanitization: While the skill lacks technical input sanitization, it contains explicit safety rules in
SKILL.mddirecting the agent not to print or commit secret values and to recommend redaction.
Audit Metadata