backend-dev
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documentation and workflow descriptions are focused entirely on legitimate software engineering practices. There are no suspicious commands or hidden payloads.\n- [SAFE]: No external script downloads or remote code execution patterns were identified. All referenced tools and frameworks appear to be part of a trusted internal development environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user requirements to drive the development workflow. This attack surface is recognized but mitigated through the inclusion of a dedicated 'Security Engineer' role in the expert panel and multiple validation phases, including vulnerability scanning and compliance checks, defined in the workflow.
Audit Metadata