quality-assurance
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides educational references and structured workflows for identifying security vulnerabilities based on the OWASP Top 10 guidelines.
- [SAFE]: The included bash scripts (security-scan.sh, run-tests.sh, lint-code.sh, coverage-report.sh) automate the execution of standard, well-known development tools for linting, testing, and security scanning.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process and analyze external code provided by the user, creating an inherent surface for indirect prompt injection. However, the instructions are focused on analytical reporting, and the utility scripts are restricted to standard development tooling.
- [SAFE]: No obfuscated code, hidden URLs, or unauthorized network operations were detected. All network-related commands (e.g., npm audit, pip-audit, codecov upload) target well-known, trusted developer services.
Audit Metadata