dfyx-code-security-audit
Warn
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions include cloning a repository from an external source (
https://github.com/EastSword/skill-dfyx_code_security_review.git) and installing its dependencies via pip. This could result in the execution of unverified external code on the system.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the user's codebase, which creates a surface for indirect prompt injection.\n - Ingestion points: The
PatternScannerandDataFlowAnalyzerclasses perform a recursive walk (os.walk) of the project directory and read recognized code files (open().read()).\n - Boundary markers: The skill lacks explicit boundary markers or instructions to the agent to treat the content of the audited files as untrusted.\n
- Capability inventory: The skill has the capability to traverse the file system, read files, and write an audit report (
security_report.md) containing code snippets.\n - Sanitization: There is no evidence of sanitization or filtering of the file contents before they are processed by the scripts or included in the final report.
Audit Metadata