entity-framework6
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from repository contexts while maintaining high-privilege capabilities including file modification and shell command execution. \n
- Ingestion points: As stated in the workflow and delivery sections of
SKILL.md, the agent is instructed to "inspect the repository context" to inventory features such as EDMX files and C# patterns. \n - Boundary markers: The skill does not define specific delimiters or "ignore" instructions to prevent the agent from following malicious prompts that might be embedded in the repository's source code or documentation. \n
- Capability inventory: According to the
SKILL.mdfrontmatter, the skill "invokes: inspect the repository context, edit targeted files, and run relevant build, test, lint, or validation commands". These are powerful capabilities that could be misused if a prompt injection occurs. \n - Sanitization: There is no evidence of content sanitization or validation logic for the data retrieved from the codebase context before it is processed by the agent.
Audit Metadata