flask
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The application template includes an open redirect vulnerability in the authentication routing logic. An attacker could use the unvalidated
nextparameter to redirect users to malicious external domains after a successful login.\n - Ingestion points: The
nextquery parameter accessed viarequest.args.get(\"next\")intemplates/app/auth/routes.py.\n - Boundary markers: The template lacks logic to verify if the redirect target is local to the application or belongs to an allowed list of domains.\n
- Capability inventory: The skill uses the
flask.redirectcapability to perform client-side redirections based on user-supplied data.\n - Sanitization: No validation or sanitization is performed on the
nextparameter before it is passed to the redirect function.
Audit Metadata