ln-94-authentication-engineer
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines an attack surface through the ingestion of untrusted data from external sources. 1. Ingestion points: project manifests, lockfiles, and source code as described in the Tool Routing section of SKILL.md. 2. Boundary markers: Absent, though the skill requires 'evidence-based outcomes'. 3. Capability inventory: usage of project-native editors and maintained runtime tooling as specified in SKILL.md. 4. Sanitization: Absent. The risk is mitigated by directives to verify all assumptions against official documentation and observed behavior rather than relying on processed data alone.
- [SAFE]: The skill follows security best practices by strictly separating authentication from authorization and prohibiting the creation of custom cryptography or recovery policies. No evidence of obfuscation, credential exfiltration, or unauthorized command execution was found.
Audit Metadata