security-scan
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted codebase data which could contain malicious instructions or specially crafted comments designed to mislead the agent or influence its analysis results.
- Ingestion points: The skill reads all files within the specified codebase scope (SKILL.md Phase 1-4), including source code, configuration files, and dependency manifests (e.g., package-lock.json, requirements.txt).
- Boundary markers: While the skill enforces credential masking and respects
.security-scan-ignorefiles, it does not use explicit delimiters to isolate untrusted file content from the agent's internal instructions. - Capability inventory: The agent is empowered to suggest and apply file modifications via the
--fixflag and is prompted to run external CLI tools likenpm auditorpip-auditbased on findings (a04-a10-additional.md). - Sanitization: The skill relies on pattern-based matching and mandates a 'report-first' approach where every file change requires explicit user approval, providing a human-in-the-loop security control.
Audit Metadata