red-team
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill suggests the installation of the
osv-scannertool from Google's official GitHub repository. - [COMMAND_EXECUTION]: The skill executes multiple command-line utilities, including
osv-scanner,rg(ripgrep),ast-grep, and the GitHub CLI (gh), to automate vulnerability detection and triage workflows. - [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it ingests and processes untrusted repository code and external vulnerability advisory data.
- Ingestion points: Reads repository source files, scanner output files (
osv.json), and GitHub Dependabot API responses. - Boundary markers: No explicit delimiters or sanitization instructions are present to distinguish between data and instructions during processing.
- Capability inventory: The skill can write files (reports and tests) and execute code through the repository's test framework.
- Sanitization: No specific sanitization or validation of the external advisory content or repository code is performed before processing.
- [DYNAMIC_EXECUTION]: The skill directs the agent to dynamically generate and execute test cases within the repository's existing test framework to verify the reachability and impact of suspected vulnerabilities.
Audit Metadata