implement-saaskit-python
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements an authentication flow that ingests untrusted data from external sources.
- Ingestion points: The skill processes authentication data via OAuth callback parameters (code, state) and session management through the
sk_sessioncookie acrossSKILL.md,references/django.md, andreferences/flask.md. - Boundary markers: The skill relies on the
scalekit-sdk-pythonlibrary to manage and validate these inputs. - Capability inventory: The agent's task involves creating and modifying application source code (
app.py,settings.py,urls.py,views.py). - Sanitization: Input validation and sanitization (such as for the
returnToredirect parameter) are delegated to the vendor-provided adapter as noted inSKILL.md.
Audit Metadata