drift-analysis

Pass

Audited by Gen Agent Trust Hub on Apr 13, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [SAFE]: No direct malicious patterns, such as hardcoded credentials, multi-layer obfuscation, or persistence mechanisms, were identified in the instructions or code snippets.
  • [COMMAND_EXECUTION]: The skill architecture describes scanning codebases and GitHub state via JavaScript collectors. These are standard read-only operations for project analysis and do not involve arbitrary command execution.
  • [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection (Category 8) due to its core functionality. Ingestion points: External data enters the context from GitHub issues, pull requests, and documentation files via collectors.js. Boundary markers: The provided templates do not utilize delimiters or specific instructions to prevent the agent from obeying instructions embedded in the processed data. Capability inventory: The agent has capabilities to read files and API states and generate comprehensive reports. Sanitization: There is no mention of validation or sanitization for external content before it is passed to the analysis model.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 13, 2026, 04:38 PM
Security Audit — agent-trust-hub — drift-analysis