web-api
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to analyze and modify existing ASP.NET Core project files, which creates a surface for indirect prompt injection if the source code contains malicious instructions.
- Ingestion points: The skill instructions include 'inspect the repository context' (SKILL.md) to perform its tasks.
- Boundary markers: There are no explicit instructions to ignore or delimit potentially untrusted content within the repository files.
- Capability inventory: The skill is authorized to 'edit targeted files' and 'run relevant build, test, lint, or validation commands' (SKILL.md).
- Sanitization: No specific sanitization or validation logic is defined for the content read from the repository.
Audit Metadata