engineering-security-engineer
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill acts as an expert security advisor. The provided instructions and code snippets for Nginx, Python (FastAPI), and GitHub Actions follow industry best practices for security hardening.
- [INDIRECT_PROMPT_INJECTION]: As a security audit tool, the skill is designed to ingest and analyze untrusted code and architecture designs. While this presents an attack surface where a malicious codebase could attempt to influence the agent's findings, the skill's instructions emphasize methodical analysis and structured reporting, which serves as a natural defensive boundary. No specific exfiltration or command execution capabilities are granted to the skill that would allow an injection to escalate beyond the conversation context.
Audit Metadata