qe-security-compliance
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted data from the local environment which exposes it to injection attacks from the code or configurations it audits.
- Ingestion points: The skill explicitly processes source code in
src/, configuration files inconfig/, environment files (.env*), and dependency manifests such aspackage.jsonandpackage-lock.json. - Boundary markers: No explicit instructions or delimiters are provided to the agent to distinguish between its operational instructions and the potentially malicious content within the files it is auditing.
- Capability inventory: The skill possesses the capability to read project files, detect secrets, generate reports, and perform automated package updates/fixes (via the
autoFixproperty independencyCheck). - Sanitization: There are no visible mechanisms to sanitize or validate the content of the files before they are processed by the LLM for analysis.
Audit Metadata