secure-headers-csp-builder
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements an endpoint to ingest Content Security Policy (CSP) violation reports from external browsers, which constitutes a data ingestion surface.
- Ingestion points: The
/api/csp-reportPOST route inroutes/csp-report.tsaccepts JSON payloads. - Boundary markers: The skill does not provide specific instructions to the agent on how to handle or isolate this external data.
- Capability inventory: Data from reports is processed via console logging and sent to AWS CloudWatch for metrics tracking.
- Sanitization: Report fields are logged and recorded without explicit validation beyond the expected JSON structure.
Audit Metadata