security-review
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow for analyzing external data flows, authentication changes, and code integrations. This ingestion of untrusted content can be exploited to inject instructions that attempt to influence the agent's security assessment. \n
- Ingestion points: The skill is designed to scope and review changes to entry points, data flows, and external integrations as specified in SKILL.md. \n
- Boundary markers: There are no instructions provided to the agent to use boundary markers or explicit delimiters when reading code or configurations for review. \n
- Capability inventory: The skill restricts its operations to read-only commands, which limits the potential damage of a successful injection. \n
- Sanitization: There are no specific instructions for the agent to sanitize or filter external content before processing it within the security review workflow.
Audit Metadata