drupal-security
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill operates on code and user-provided data, creating a potential surface for indirect prompt injection if the agent processes malicious code snippets.
- Ingestion points: The skill activates during the writing and editing of forms, controllers, and plugins where untrusted code or data is present.
- Boundary markers: The skill does not define specific delimiters for separating its logic from the code it analyzes.
- Capability inventory: The skill does not define tool access or execution capabilities in its metadata.
- Sanitization: The skill functions as a security reviewer, instructing the agent to actively sanitize and validate logic according to Drupal security standards.
- [EXTERNAL_DOWNLOADS]: The skill references documentation from Drupal.org and OWASP, which are well-known and authoritative security resources.
Audit Metadata