security-review
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external codebases, creating a surface for indirect prompt injection attacks where malicious instructions embedded within the code being audited could attempt to influence the agent's behavior or bias its security assessment.
- Ingestion points: The skill processes codebase content as specified in the subagent delegation task within SKILL.md.
- Boundary markers: The instructions lack explicit delimiters or specific warnings to ignore embedded natural language instructions within the code files under review.
- Capability inventory: The agent has the capability to read files, perform analysis, and generate reports with remediation guidance.
- Sanitization: No specific sanitization or validation of the input code is defined before it is processed by the security-reviewer agent.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard security tooling for dependency analysis.
- Evidence: Specifies the use of
npm auditto identify vulnerabilities in the project's dependency tree.
Audit Metadata