vibe-code-auditor
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a rigorous framework for identifying security risks in code, such as hardcoded credentials, unsanitized input, and insecure defaults.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data (source code files) which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Analyzes source code files and snippets provided by the user or read from the environment (SKILL.md).
- Boundary markers: The instructions lack explicit delimitation or directives to the agent to disregard instructions embedded within the audited code's comments or strings.
- Capability inventory: The skill utilizes the
Read,Grep,Glob, andBashtools to perform its analysis (SKILL.md). - Sanitization: No sanitization of the audited source code is performed prior to analysis.
Audit Metadata