fort-firewall-malware-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from external sources and possesses capabilities that could be influenced by malicious content embedded in that data.
- Ingestion points: Processes repository README.md content and metadata retrieved from the GitHub API.
- Boundary markers: Lacks explicit delimiters or instructions to ignore potential commands embedded in analyzed content.
- Capability inventory: Includes the ability to write analysis reports to the local file system and perform network requests via requests and axios.
- Sanitization: No sanitization or escaping is performed on the ingested data before it is included in the generated report files.
- [EXTERNAL_DOWNLOADS]: The skill interacts with the official GitHub API to fetch repository metadata, which is a well-known and trusted service.
Audit Metadata