ai-generated-business-code-review
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and analyze external, untrusted AI-generated code, which creates a potential surface for indirect prompt injection.
- Ingestion points: The 'Workflow' section in SKILL.md requires the agent to inspect behavior and requirements of provided code.
- Boundary markers: The instructions do not define specific delimiters or guardrail prompts to prevent the agent from following instructions embedded within the code under review.
- Capability inventory: No shell commands, network operations, or tool invocations are defined within this skill file.
- Sanitization: No input validation or escaping procedures are specified for the code provided by the user.
Audit Metadata