python-pro
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill incorporates security-focused development practices, including the use of
banditfor vulnerability scanning, SQL injection prevention, and secret management using environment variables. - [INDIRECT_PROMPT_INJECTION]: The skill describes expertise in web scraping using libraries like
httpx,BeautifulSoup, andScrapy. This represents a potential attack surface for indirect prompt injection if the agent processes untrusted web content. - Ingestion points: Web scraping capabilities mentioned in
SKILL.md(e.g., httpx, BeautifulSoup, Scrapy). - Boundary markers: No explicit delimiters or instructions are defined for the agent's own processing of scraped content.
- Capability inventory: The skill assumes standard developer agent capabilities, such as file system access and shell/REPL execution.
- Sanitization: The instructions prioritize input validation and sanitization for the code the agent produces, which serves as a mitigation for generated applications.
Audit Metadata