attack-path-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- Indirect Prompt Injection Surface: The skill is designed to ingest and analyze potentially untrusted data from security scan candidates and repository-specific threat models.
- Ingestion points: Data enters the agent's context through the
list_codex_security_candidatestool and by reading threat model files from the repository. - Boundary markers: The instructions do not explicitly mandate the use of boundary markers or delimiters when processing these inputs, though it emphasizes factual analysis.
- Capability inventory: The skill possesses the capability to read and write to the file system (specifically artifact paths) and record analysis results via the
record_candidate_attack_pathstool. - Sanitization: There are no explicit instructions for sanitizing or escaping the content of security findings before they are analyzed or recorded.
- Network Access Controls: The skill contains explicit instructions to restrict network access unless authorized by the user, which serves as a security control for the execution environment.
Audit Metadata