audit
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to ingest and review untrusted external data, such as codebases, pull requests, and session logs, creating an attack surface for indirect prompt injection where malicious data could influence the agent's behavior.
- Ingestion points: Data enters the agent's context through the reading of the codebase, uncommitted diffs, and session history as described in the 'State the scope' section of
SKILL.md. - Boundary markers: The provided instructions lack specific delimiters or explicit warnings to the model to ignore instructions potentially embedded within the data being audited.
- Capability inventory: This specific skill focuses on analysis and report generation and does not explicitly invoke system capabilities such as network operations or file writes in the provided files.
- Sanitization: There are no instructions for sanitizing or escaping the content retrieved from external files before it is processed by the agent.
Audit Metadata