ping-orchestration-sdk-router
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses shell commands like
find,grep, andtestto detect the presence of specific platform markers (e.g.,AndroidManifest.xml,Package.swift,package.json). These commands are used for classification and routing purposes. - [COMMAND_EXECUTION]: Probes are implemented with security best practices, including a
maxdepthlimit of 4 and the exclusion of sensitive or bulky directories such as.git,node_modules,build, andPods. - [PROMPT_INJECTION]: The ForgeRock detection probe scans file contents for specific strings, which represents a surface for indirect prompt injection. However, the risk is mitigated by the use of the
-lflag, which ensures that only matching filenames are returned to the agent, preventing the ingestion of potentially malicious content from the files themselves.
Audit Metadata