security-headers-audit
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze user-provided source code and configuration files, creating a vulnerability surface where malicious instructions in the data could attempt to override agent instructions.
- Ingestion points: Framework-specific files such as
nginx.conf,app.js,package.json, andsettings.pyare processed by the agent. - Boundary markers: The instructions lack explicit boundary markers or directives to treat analyzed code strictly as data.
- Capability inventory: The skill is restricted to static analysis and does not possess network, shell, or file-writing capabilities.
- Sanitization: No sanitization or filtering of the input content is defined in the workflow.
Audit Metadata