seguranca-mvs
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill operates as a high-level security consultant, providing structured recommendations based on international standards (ISO 27001, NIST) and Brazilian law (LGPD). Analysis of the provided instructions and reference files reveals no evidence of malicious intent or unauthorized actions.
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function involves analyzing user-provided data, including application architecture and code reviews. This creates a potential surface for indirect prompt injection if malicious instructions are embedded in the analyzed content. However, the skill incorporates a diagnostic framework that requires initial context gathering and focuses on advisory output rather than automated command execution, significantly limiting the exploitability of this vector.
Audit Metadata