ce-agent-native-audit
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a comprehensive audit workflow using platform-native sub-agent capabilities. No indicators of prompt injection, data exfiltration, or unauthorized command execution were found.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to read and process untrusted codebase content (scripts, components, and documentation).
- Ingestion points: The skill specifically instructs agents to read API service files, component files, tool definitions, and system prompts from the local repository.
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands within the analyzed code are provided to the sub-agents.
- Capability inventory: The sub-agents are tasked with reading, analyzing, and summarizing code. No file-write, network-send, or arbitrary code execution capabilities are granted within the workflow.
- Sanitization: No sanitization or validation of the ingested code content is performed before processing.
- Risk Assessment: The risk is considered low because the skill's capabilities are limited to reading and generating a text report for the user, with no active write or network operations that could be hijacked.
Audit Metadata