kernel-audit-review
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFEPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: Indirect Prompt Injection Surface. The skill's primary function is to ingest and evaluate external artifacts (files, diffs, and artifacts), which introduces a vulnerability to indirect prompt injection. Malicious instructions hidden within the data being reviewed could attempt to subvert the agent's analysis or influence its final recommendation.
- Ingestion points: The skill reads 'relevant files, diffs, or artifacts produced' during the 'Examine the output' step.
- Boundary markers: The instructions lack explicit boundary markers or directives for the agent to ignore instructions found within the reviewed content.
- Capability inventory: The skill is configured with access to the
Read,Grep,Glob, andBashtools in its allowedTools frontmatter. - Sanitization: There are no instructions for sanitizing or escaping the content retrieved from external files before it is processed by the agent.
Audit Metadata