site-audit
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent on how to install third-party auditing tools such as squirrelscan and Audit Kit through various package managers and download methods.
- [REMOTE_CODE_EXECUTION]: The documentation provides installation patterns for the squirrelscan CLI that involve piping remote scripts directly to shell interpreters (e.g., curl | bash and iwr | iex).
- [COMMAND_EXECUTION]: The skill utilizes local CLI tools (squirrel, ak, node --check) to perform analysis tasks and project maintenance.
- [INDIRECT_PROMPT_INJECTION]: The instructions explicitly identify data from external websites and reports as untrusted content, requiring the agent to ignore any embedded instructions that attempt to override its configuration or safety protocols (Rule 11 in SKILL.md).
Audit Metadata