pseudo-elements
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to read and analyze local source code files provided by the user. This creates a surface for indirect prompt injection where adversarial code within the files could attempt to influence the agent's summary or reporting behavior. However, the skill lacks exploitable capabilities such as network access, file system writing, or subprocess execution, which significantly mitigates the risk.
- Ingestion points: The skill reads files in scope for analysis as described in the "Read the decorative layers" section.
- Boundary markers: The skill does not explicitly define boundary markers or provide instructions to ignore content that looks like instructions within the analyzed code.
- Capability inventory: The skill is limited to reading files and generating a text-based report/summary.
- Sanitization: No sanitization or filtering of the analyzed file content is specified.
Audit Metadata