deployment-validation-config-validate
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection by processing external configuration data. \n- Ingestion points: Configuration files (e.g., .env, .yaml, .json) are read from the project path in the
ConfigurationAnalyzerandRuntimeConfigValidatorclasses. \n- Boundary markers: No explicit delimiters or instructions are defined to separate untrusted data from instructions. \n- Capability inventory: Usespathlibfor file reading andchokidarfor file watching; no network capabilities are present in the provided snippets. \n- Sanitization: Uses standard parsing libraries (json, PyYAML) without explicit sanitization or escaping of the ingested content before it enters the agent context.
Audit Metadata