license-compliance-auditor
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill does not include any executable scripts, binaries, or command-line instructions. It consists entirely of documentation and metadata configuration.
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data (package manifests) which constitutes a potential attack surface, although no active exploitation was found.
- Ingestion points: Dependency manifests (e.g., package.json, requirements.txt) located within the provided
project_path. - Boundary markers: None defined in the skill configuration.
- Capability inventory: File system read access for manifests and internet access for transitive dependency resolution via public registries.
- Sanitization: Not explicitly defined; the skill is intended to extract specific metadata fields like SPDX identifiers.
Audit Metadata