production-hardener
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill audits arbitrary project repositories, introducing a potential surface for indirect prompt injection.\n
- Ingestion points: The agent reads source code, package files, and configuration templates (e.g., .env files, Dockerfiles) across the target repository.\n
- Boundary markers: No specific instructions direct the agent to use delimiters or ignore instructions when processing repository content.\n
- Capability inventory: The skill utilizes shell access and repository read/write permissions to execute audits and perform optimizations.\n
- Sanitization: The instructions do not specify any validation or sanitization of the content read from external repository files.\n- [COMMAND_EXECUTION]: The skill includes a shell script for automated discovery of project infrastructure.\n
- Evidence: The script
scripts/quick-audit.shexecutes localfindandgrepcommands to locate package files and deployment configurations.
Audit Metadata