legacy-code-expert
Pass
Audited by Gen Agent Trust Hub on Jul 15, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection vulnerabilities due to its design pattern.
- Ingestion points: The skill uses
Read,Grep, andGlobtools to ingest external, potentially untrusted source code into the agent's context for analysis. - Boundary markers: There are no explicit instructions or delimiters defined to isolate the ingested code or warn the agent to ignore embedded instructions within the target files.
- Capability inventory: The agent is granted high-privilege tools including
Bash,Edit, andWrite, which allow for shell command execution and file system modifications. - Sanitization: The skill lacks mechanisms to sanitize or validate the content of the files it processes before they are interpreted by the agent.
Audit Metadata