security-audit
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze user-provided code, configuration files, and infrastructure-as-code templates (ingestion points). While the skill lacks explicit boundary markers or sanitization instructions for this untrusted data, it possesses no capabilities for command execution, network operations, or file system writes. This design significantly limits the potential impact of any indirect prompt injection contained within the analyzed files.
Audit Metadata