cobol-modernization
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests external COBOL source code and documentation for modernization and translation.\n
- Ingestion points: Source files located at the path provided to the
--src-pathargument in the migration command (SKILL.md).\n - Boundary markers: The provided documentation does not specify the use of delimiters or instructions to ignore embedded prompts within the COBOL source.\n
- Capability inventory: The workflow involves file system access for reading source and writing migrated Java code, as well as executing the GnuCOBOL compiler (SKILL.md).\n
- Sanitization: There is no evidence of sanitization or validation of the input source code to prevent embedded instructions from influencing the LLM during the migration phases.
Audit Metadata