flux-opencode-security-review
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PROMPT_INJECTION]: The skill ingests untrusted data from repository source files and metadata (.flux/threat-model.md) during the security review process, creating a surface for indirect prompt injection.
- Ingestion points: Source code files and .flux/threat-model.md in the project directory.
- Boundary markers: No explicit delimiters or markers are instructed to distinguish untrusted file content from the agent's instructions.
- Capability inventory: Executes shell commands (git, stat, date) and performs file write operations.
- Sanitization: The skill lacks explicit instructions for sanitizing or escaping the content of the analyzed files.
- [COMMAND_EXECUTION]: The skill uses bash commands like stat, date, and git diff to manage the analysis scope and check metadata. These are standard operations for a repository auditing tool.
Audit Metadata