security-scanning-security-sast
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script that utilizes the
subprocess.runmethod to invoke external tools such as Semgrep for code analysis. - [INDIRECT_PROMPT_INJECTION]: The skill creates an attack surface for indirect prompt injection by reading and processing external code files.
- Ingestion points: Source code files are identified using glob patterns in metadata and implementation (e.g.,
**/*.py,**/*.js). - Boundary markers: The skill does not implement delimiters or explicit instructions to the agent to disregard instructions within the ingested data.
- Capability inventory: The skill possesses the ability to execute shell commands and read project files to generate findings.
- Sanitization: No sanitization is performed on the content of the files being scanned before they are processed by the agent or tools.
Audit Metadata