security-requirement-extraction
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill contains standard Python code for data structure modeling and markdown formatting. No instances of credential exposure, malicious persistence, or remote code execution were found.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a framework to ingest external threat data via
ThreatInputobjects inSKILL.md. While boundary markers and sanitization are absent in the formatting logic, the skill does not possess capabilities such as file writing, command execution, or network operations, limiting the impact of any potential injection.
Audit Metadata