security-vulnerability-management
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely procedural and descriptive, defining a business process for vulnerability management without implementing active technical functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a process for ingesting external data such as vulnerability reports, bug bounty submissions, and technical reproduction evidence.
- Ingestion points:
SKILL.md(Inputs To Gather section). - Boundary markers: The workflow does not specify delimiters or instructions to ignore embedded commands in the source data.
- Capability inventory: No subprocess calls, network operations, or file-writing scripts are included in the skill.
- Sanitization: No specific validation or sanitization steps are defined for the technical details gathered from external sources.
Audit Metadata