prowler-mcp
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes findings and remediation data retrieved from external API sources, creating a potential surface for instructions hidden within analyzed data to influence the agent behavior.
- Ingestion points: Data is fetched via API requests in
assets/tool_implementation.pyand converted to models for consumption. - Boundary markers: The implementation does not include explicit boundary delimiters or 'ignore' instructions for the data interpolated into the agent context.
- Capability inventory: The skill is configured with access to high-capability tools such as
Bash,Write, andEdit, as defined in the skill frontmatter. - Sanitization: Data from the API is mapped directly into LLM-facing models in
assets/models.pywithout specific filtering or sanitization of text fields such as remediation recommendations.
Audit Metadata