analyze
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's primary function is to analyze an external 'Analysis Target' ($ARGUMENTS), which involves reading codebase content such as source code, documentation, and configuration files. This creates a vulnerability surface where malicious instructions embedded in those files (e.g., in comments or string literals) could potentially influence the agent's synthesis of discoveries or its orchestration of subagents. The skill implements some mitigating factors like structured discovery formats, but the exposure to untrusted data is inherent to its operation.
Audit Metadata