cwe-code-quality
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFE
Full Analysis
- Code Security Auditing Role: The skill establishes a specialized role for the agent as an auditor, providing 16 specific CWE definitions (Common Weakness Enumeration) to guide the analysis of source code. This is a standard instructional pattern for automated security tools.
- Standardized Output Format: It requires the agent to generate a structured JSON report containing findings, evidence, and severity levels. This facilitates consistent data integration with downstream security management systems.
- Input Processing Context: The skill is designed to analyze application source code provided in the agent's context. While processing external data is a typical surface for indirect prompt injection, the instructions are scoped to identifying specific vulnerability patterns in a read-only manner, which aligns with its intended security-focused purpose.
Audit Metadata