derive-the-flag-dont-store-and-correct-it
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill serves as an educational guide for Android developers, focusing on efficient state management in Kotlin.
- [COMMAND_EXECUTION]: The skill provides a
grepcommand to help users identify specific code patterns. This is a standard local search operation for developer tools and poses no security risk. - [INDIRECT_PROMPT_INJECTION]: The skill establishes a pattern for the agent to ingest and analyze local source code files.
- Ingestion points: Local Kotlin files (
*.kt) searched via grep. - Boundary markers: Absent.
- Capability inventory: Static code analysis and local file reading.
- Sanitization: Absent. (Note: This is considered safe as it is the primary and expected function of a coding assistant skill).
Audit Metadata