k7-total-security-patch-unlock-warning
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves a defensive purpose, providing patterns and logic for AI agents to identify malware distribution schemes and protect users.
- [CREDENTIALS_UNSAFE]: The skill demonstrates secure management of API keys by recommending the use of environment variables and placeholders instead of hardcoding sensitive information.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted repository metadata, representing a potential injection surface. Evidence Chain: (1) Ingestion point:
repo_datainput inSuspiciousRepoDetector. (2) Boundary markers: The skill provides warning templates rather than interpolating data into executable prompts. (3) Capability inventory: No automated execution or network capabilities are present in the detection logic. (4) Sanitization: The skill uses keyword and regex-based filtering to flag malicious patterns. As this is part of the skill's primary defensive purpose, it is considered safe.
Audit Metadata