carnemuerta-security-portfolio
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill content includes phrases typically associated with prompt injection, such as "ignore previous instructions" and "disregard all above". These strings are explicitly used within a Python code example that demonstrates how to implement input validation and detection for these specific attack patterns in a security context.
- [EXTERNAL_DOWNLOADS]: The setup instructions direct the user to clone a project repository from a GitHub account (
reedjordanvrb4237/0xcarnemuerta-security-hub). This repository provides the static assets (HTML, CSS, JavaScript) required to host the security portfolio. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for blog posts (e.g., in the
posts/directory) which serve as ingestion points for security content. While the skill does not enforce strict boundary markers in the templates, it provides a Python validation function as a sanitization strategy using blacklist logic to filter injection patterns. The capability inventory for the skill is limited to static file serving, and the provided documentation encourages sanitization of external content before interpolation.
Audit Metadata