security-testing
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocessmodule to coordinate internal data processing tasks across multiple utility scripts. Scripts such asbatch_convert_templates.py,convert_to_json.py, andparse_markdown.pyinvokesubprocess.call()to run internal helpers likeconvert_formats.pyandparse_formats.py. These operations are limited to local file system actions and use the current Python interpreter environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external project context provided by users, which represents a potential surface for indirect prompt injection. To mitigate this risk, the core instructions explicitly direct the agent to distinguish between confirmed project facts and user-provided assumptions, while also prohibiting the generation of offensive exploitation instructions.
Audit Metadata