drift-analysis
Pass
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [SAFE]: No direct malicious patterns, such as hardcoded credentials, multi-layer obfuscation, or persistence mechanisms, were identified in the instructions or code snippets.
- [COMMAND_EXECUTION]: The skill architecture describes scanning codebases and GitHub state via JavaScript collectors. These are standard read-only operations for project analysis and do not involve arbitrary command execution.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) due to its core functionality. Ingestion points: External data enters the context from GitHub issues, pull requests, and documentation files via
collectors.js. Boundary markers: The provided templates do not utilize delimiters or specific instructions to prevent the agent from obeying instructions embedded in the processed data. Capability inventory: The agent has capabilities to read files and API states and generate comprehensive reports. Sanitization: There is no mention of validation or sanitization for external content before it is passed to the analysis model.
Audit Metadata