backend-engineering-workflow
Pass
Audited by Gen Agent Trust Hub on Aug 20, 2026
Risk Level: SAFEDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [DATA_EXFILTRATION]: The skill provides
verify_api.pyandbenchmark_endpoint.pywhich utilize the Pythonurlliblibrary to make HTTP requests. While these are intended for legitimate API verification and performance benchmarking of the project under development, they technically grant the agent a general-purpose network communication capability. - [PROMPT_INJECTION]: The workflow is susceptible to indirect prompt injection due to its requirement to read and analyze untrusted files from a repository. 1. Ingestion points: Files are ingested during the Inspect phase and processed by reviewer agents such as
security-reviewer.md. 2. Boundary markers: The skill does not employ specific delimiters or 'ignore' instructions for the data it processes. 3. Capability inventory: The agent has the capability to modify the filesystem and perform network requests via the included scripts. 4. Sanitization: No sanitization or validation of the input file content is performed prior to processing by the agent.
Audit Metadata