web-application

Fail

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: CRITICAL
Full Analysis
  • [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety filters, or extract system prompts were found. The instructions are purely technical and development-oriented.
  • [DATA_EXFILTRATION]: No sensitive data exposure or exfiltration patterns were detected. The skill specifically promotes the use of SecretStr for handling credentials and provides guidance against logging sensitive information.
  • [REMOTE_CODE_EXECUTION]: There are no remote code execution patterns, such as piping network downloads to a shell. All mentioned dependencies are standard industry tools (e.g., FastAPI, SQLAlchemy, Alembic).
  • [OBFUSCATION]: No obfuscated code, hidden Unicode characters, homoglyph attacks, or multi-layer Base64 encoding were found.
  • [COMMAND_EXECUTION]: No dangerous command execution or privilege escalation attempts were identified. CLI examples provided are standard for Alembic and Pydantic development workflows.
  • [EXTERNAL_DOWNLOADS]: References to external documentation, including the official HTTPX documentation site (python-httpx.org), are informative and point to well-known technology resources.
  • [INDIRECT_PROMPT_INJECTION]: While the skill describes processing external data, it explicitly teaches mitigation strategies such as boundary validation using Pydantic and parameterized queries using SQLAlchemy to prevent injection vulnerabilities.
Recommendations
  • Contains 4 malicious URL(s) - DO NOT USE
Audit Metadata
Risk Level
CRITICAL
Analyzed
Oct 30, 2026, 04:48 PM