skills/reason-machines/security-skills/k7-total-security-unlock-patch-security-analysis/Gen Agent Trust Hub
k7-total-security-unlock-patch-security-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill provides Python functions (
analyze_piracy_indicatorsandanalyze_readme_authenticity) designed to ingest and analyze untrusted data from external repositories, such as metadata and README content. \n - Ingestion points: The functions accept
repo_dataandreadme_contentstrings as inputs inSKILL.md. \n - Boundary markers: The provided analysis logic does not utilize boundary markers or instructions to disregard embedded commands in the analyzed text. \n
- Capability inventory: The skill uses regex, string searching, and the
requestslibrary for network-based verification. \n - Sanitization: Input data is not sanitized before being processed by the detection logic. \n- [EXTERNAL_DOWNLOADS]: The skill includes documentation that references external URLs, including a malicious impersonation site and the VirusTotal API, intended for demonstration and verification purposes.
Audit Metadata