drupal-coding-standards
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill bundle consists entirely of markdown files providing coding standards for various languages (PHP, JS, CSS, SQL, Twig, YAML). There are no scripts (.py, .js, .sh), binary executables, or hidden configuration files that could execute actions or access sensitive data.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed for code review, which inherently involves the ingestion of untrusted code snippets. However, the skill does not grant the agent any execution capabilities or tools that could be exploited by malicious payloads in the reviewed data.
- Ingestion points: The agent reads and reviews external code files provided by the user, as described in the workflow in
SKILL.md. - Boundary markers: The skill does not define explicit delimiters or instructions to ignore embedded commands within the code being reviewed.
- Capability inventory: None. The skill provides informational context only and does not include scripts, tools, or network operations.
- Sanitization: No sanitization or input validation logic is present.
Audit Metadata