security-review
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use shell commands, such as
git logwith regex patterns, to identify hardcoded credentials in the repository history. - [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted external code and reports, creating a surface for potential indirect prompt injection attacks. 1. Ingestion points: Processes source code, diffs, and pentest reports provided as user input. 2. Boundary markers: No specific delimiters or warnings are used to isolate untrusted data from instructions. 3. Capability inventory: The skill uses shell tools and performs analysis on files. 4. Sanitization: No input sanitization or escaping mechanisms are described.
Audit Metadata