security-scan

Pass

Audited by Gen Agent Trust Hub on Sep 22, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill analyzes untrusted codebase data which could contain malicious instructions or specially crafted comments designed to mislead the agent or influence its analysis results.
  • Ingestion points: The skill reads all files within the specified codebase scope (SKILL.md Phase 1-4), including source code, configuration files, and dependency manifests (e.g., package-lock.json, requirements.txt).
  • Boundary markers: While the skill enforces credential masking and respects .security-scan-ignore files, it does not use explicit delimiters to isolate untrusted file content from the agent's internal instructions.
  • Capability inventory: The agent is empowered to suggest and apply file modifications via the --fix flag and is prompted to run external CLI tools like npm audit or pip-audit based on findings (a04-a10-additional.md).
  • Sanitization: The skill relies on pattern-based matching and mandates a 'report-first' approach where every file change requires explicit user approval, providing a human-in-the-loop security control.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 22, 2026, 02:56 PM
Security Audit — agent-trust-hub — security-scan