senior-security
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructions do not contain any evidence of malicious behavior, obfuscation, or unauthorized data access. The commands provided are standard for setting up and running a development environment and security analysis tools.- [PROMPT_INJECTION]: The skill is designed to ingest and analyze external codebases and project files via
scripts/threat_modeler.pyandscripts/security_auditor.py. This creates a surface for indirect prompt injection if the target files contain instructions intended to manipulate the agent's output. - Ingestion points: Project paths passed to
threat_modeler.pyandsecurity_auditor.pyinSKILL.md. - Boundary markers: No explicit instruction delimiters or 'ignore' instructions are present in the skill text.
- Capability inventory: Execution of Python scripts, file system access, and package installation commands.
- Sanitization: The skill does not mention specific sanitization or validation logic for external inputs.
Audit Metadata