avast-premium-security-detection
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides educational C++ code snippets for analyzing software repositories. These examples demonstrate legitimate security practices such as SHA256 checksum verification using OpenSSL, official domain validation, and string-based pattern matching to detect common malware indicators like keygens or unauthorized webhooks.\n- [INDIRECT_PROMPT_INJECTION]: The skill operates on untrusted external data (repository metadata, descriptions, and file content). This represents a vulnerability surface where an attacker-controlled repository could attempt to influence the agent's behavior. However, the skill mitigates this by providing structured detection logic and specific red-flag checklists to guide the agent's analysis rather than blindly processing input.
Audit Metadata