auditing-code-security
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The instructions establish a rigorous read-only security posture. The skill explicitly forbids the agent from making code changes, installing new software, using discovered credentials, or probing external/live targets during an audit.
- [PROMPT_INJECTION]: The skill is designed to analyze untrusted code (diffs, pull requests, and repository files), which introduces a surface for indirect prompt injection.
- Ingestion points: Audited code targets, pull request context, and repository files as defined in
SKILL.md. - Boundary markers: None specified for isolating audited code content from agent instructions.
- Capability inventory: Limited to read-only file system access and the execution of pre-installed local security tools; network egress and file write operations are strictly prohibited.
- Sanitization: The instructions require the agent to manually verify reachability and attacker influence for every finding, mitigating the risk of being misled by malicious comments or data within the audited codebase.
Audit Metadata