security-quick-scan
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill is composed entirely of markdown instructions and does not include any scripts, executable files, or tool configurations that could perform automated actions.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions define an ingestion surface for untrusted data by having the agent analyze external code and configuration files.
- Ingestion points: The skill requests 'Code or config diff' and 'Auth and data handling flow' as user inputs (SKILL.md).
- Boundary markers: The instructions lack specific delimiters or directions for the agent to isolate potentially malicious commands embedded in the analyzed data.
- Capability inventory: No tools, network operations, or shell execution capabilities are defined in the skill body or frontmatter.
- Sanitization: No sanitization or validation logic is specified for the inputs provided for analysis.
Audit Metadata