16-frontend-security
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest untrusted content and inspect repository code to identify and mitigate vulnerabilities, which constitutes an attack surface for indirect prompt injection. This behavior is consistent with the skill's primary purpose.
- Ingestion points: Repository inspection and handling of untrusted content as specified in the AI implementation contract in SKILL.md.
- Boundary markers: None are defined in the skill instructions.
- Capability inventory: Inspecting dependencies, frameworks, and implementing security features like authentication flows and XSS protections.
- Sanitization: No sanitization is implemented for inputs to the agent itself, though the skill directs the agent to implement sanitization in the resulting code.
Audit Metadata