supply-chain-security
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to run security scanning tools such as
gitleaksandosv-scanner. These commands are executed within the local environment to analyze project files. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it is designed to ingest and analyze external, untrusted data including dependency manifests, lockfiles, and build scripts.
- Ingestion points: Files like
package.json,requirements.txt, and various lockfiles are processed by the agent as specified in SKILL.md. - Boundary markers: None. The instructions do not specify delimiters or warnings to ignore instructions embedded within the data being scanned.
- Capability inventory: The skill utilizes shell execution for running audit tools.
- Sanitization: None. The skill does not describe any methods for filtering or sanitizing the content of the analyzed files.
Audit Metadata